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COVER FOCUS 

Save Money By Going Green 

Whether your enterprise is just getting on the 
green bandwagon or has already established 
policies and procedures, we've come up with 
tips, tools, and strategies that can help. 

Going Green: A Primer 1 

You Have Tlie Power 7 

Conserve Power At Rest 8 

LEED-ing Tlie Green Revolution 9 



Top Consumer Trends To Watch 

Which consumer 
technologies and 
trends are making 
their way to your 
enterprise? We 
talked with experts 
to come up with 
some strategies for 
making the most of 
them and perhaps even using them to your 
advantage. See page 24. 




TECH & TRENDS 

■ Vulnerability assessment is a critical part of data 
center operations because it means monitoring ports 
and access points to make sure there is no possibility of 
intrusion page 1 

■ Poring over logs in the data center has been a neces- 
sity for compliance, security, and other reasons. Here, 
we take a look at the biggest problems with log man- 
agement tools and provide tips and advice as to how 
you can overcome them page 32 

■ Government agencies rely on critical systems that 
protect priceless data, and their software has not 
escaped the cyber criminal's notice. But agencies can 
take several steps to keep applications safe through- 
out their life cycle page 33 

■ The American Clean Energy act will hit data centers 
through an increase in electricity bills by 20% or more, 
according to one industry expert page 34 

NEWS 

■ EMC has successfully outbid rival company NetApp 
to acquire majority ownership of Data Domain for $2.1 
billion page 2 

■ According to the China Internet Networking Infor- 
mation Center, the number of people using Internet 
services in China has surpassed the entire population 
of the United States page 2 

■ Although revenue for chip maker AMD was down by 
13% in Q2, its $1.18 billion in sales was still higher than 
the expected $1.13 billion page 3 

■ IT research firm Nucleus Research has released a 
study that shows that Facebook is a productivity killer 
for workers page 3 

■ Apple announced better-than-expected results for the 
second quarter, thanks to increased sales of Macs and 
iPhones page 33 



Going Green: 
A Primer 



A Look At What "Green" 
Means For IT 

by Carmi Levy 
• • • 

It's easy to say you want to go green and 
a lot tougher to figure out where to get start- 
ed. Even worse, there's httle consensus in the 
IT community on what Green IT is in the 
first place. 

"There needs to be more definition behind 
it," says Derek Kober, vice president and 
director of the BPM Forum (www.bpm 
forum.org). "It's similar to cloud computing, 
with different people defining it in all sorts of 
ways. It can be viewed along the lines of 
doing more with less or accomplishing the 
same amount of compute while being more 
energy-efficient." 

The need for a universally understood defi- 
nition has never been higher, as IT decision 
makers struggle to integrate greater sustain- 
ability into their infrastructure planning and 
operations. Going green is increasingly being 
viewed as an outright necessity as business 
requirements expand; recession-racked com- 
panies slash IT budgets; and access to consis- 
tent, inexpensive power becomes more elu- 
sive. Just because IT isn't getting the money 
to revamp the data center doesn't mean it's 
any less accountable to do more with less. 



Key Points 



Broaden your scope beyond power and 
cooling. Green IT involves a wide range of 
activities across the full product life cycle, 
from acquisition to retirement. 

Manage demand downward by retiring 
obsolete applications and challenging 
developers to reduce footprint of newly 
designed and implemented code. 

Don't compromise business functionality. 
Efficiency means nothing if IT fails to 
deliver enough computing capability. 




"The general demand on compute these 
days is not shrinking," says Jason Coari, 
senior marketing manager with SGI 
(www.sgi.com), which has partnered with 



the BPM Forum on the Think Eco-Logical 
initiative to help companies simultaneously 
become more environmentally friendly and 
Go to Page 6 



Gauge Vulnerability 
Assessment Tools 

Deciding Which Products To Use 
Requires Careful Analysis 



Key Points 



Vulnerability assessment is important due 
to ever-changing compliance regulations. 

The process begins with a careful analysis 
of IT equipment and risks involved. 

Cost calculations should include the loss of 
revenue during security breaches. 



hy John Brandon 
• • • 

In the modern data center or server room, 
security pitfalls abound. One that can have a 
lasting impact is when you choose the wrong 
product and — ^because of budget or other fac- 
tors — must live with the consequences. Yet, 
with a large number of compliance regulations 
such as fflPAA and PCI DSS (Payment Card 
Industry Data Security Standard) in an ever- 
evolving state and industry- specific guide- 
lines, assessing security options is difficult. 

"Compliance regulations are somewhat of 
a moving target," says Anthony James, vice 
president of products at Fortinet (www.forti 
net.com), a company that makes vulnerabili- 



ty assessment tools. "They are ever chang- 
ing, open to interpretation, and a bit of a 
challenge. Just because you are compliant 
does not mean you are secure, so there's a 
need for continually updating as more vul- 
nerabilities appear." 

Assessing Vulnerability 

Vulnerability assessment is a critical part 
of data center operations because it means 
monitoring ports and access points to make 
sure there is no possibility of intrusion. It 
also means assessing where security holes 
exist due to lack of updates on servers, 
client machines, networks, and other equip- 
ment that could leave the business open to 



attack — either from viruses and malware or 
from outside intrusion. 

Michael Davis, CEO of Savid Technolo- 
gies (www.savidtech.com), a company that 
provides security assessments, says there is a 
set process he recommends for an SME to 
help gauge assessment tools, because analyz- 
ing security tools is partly a technical func- 
tion and partly a risk assessment. 

He says the best approach is to first list all 
devices in the data center and in the company 
in a spreadsheet and then assign a risk level 
to each — meaning, which ones will present a 
low risk, could have a business impact, or 
would cause a company-wide shutdown. He 
suggests using color-coding and then assign- 
ing a dollar value for each risk, such as cost 
Go to Page 6 
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TECH & TRENDS 

■ Twenty-first century healthcare data must be digital 
and portable, but it also must be protected. However, 
many organizations need guidance on how to safeguard 
their digital assets both during use and after a problem 
arises page 35 

■ Some things get better with age. But over time, data 
centers generally struggle through grave challenges in 
processing, power, space, and other areas ... page 36 

■ Energy recovery wheels, which increase energy effi- 
ciency by preconditioning a facility's incoming air, are an 
established technology in many markets, and now they 
are gaining popularity in data centers page 37 

■ Studies have found that printers, supplies, and 
support account for 10 to 20% of the typical IT budget. 
Yet printing remains a critical element of many business 
processes and there's nothing like paper for document 
portability and convenience page 38 

TIPS & HOW TO 

■ Many of the biggest SME security threats have a 
Web-based component, but data centers have numer- 
ous options for combating them page 28 

■ Colocation, defragmentation, and virtualization are 
just a few of the steps data centers can take to boost 
their server and system availability page 28 

■ For many ClOs, identifying, mentoring, and managing 
a successor is a long-term project that's put off due to 

the pressures of short-term issues and other tasks 

page 30 

■ Disaster recovery planning is the key to avoiding or 
minimizing loss and to getting your systems up and run- 
ning as soon as possible page 30 

COMPANIES 

■ Barracuda Networks has rapidly grown to become a 
global leader in content security appliances designed 
to protect all types of enterprises from a litany of threats.. 
page 39 

■ Information Support Concepts sells everything from 
rack mounts to computer chairs and pretty much any- 
thing else a small to midsized enterprise needs to fur- 
nish and build out its data center page 42 

PRODUCTS 

■ The Modular Metered Power line of power strips 

from BayTech measures the amount of power a server is 
using page 18 

■ The Indianapolis Colts turned to Venyu when it real- 
ized it didn't have the capacity to back up all the data it 
needed in case of a disaster and didn't have a true off- 
site disaster recovery solution page 22 

■ DriveSavers came to the rescue when the Shaw Air 
Force Base Civil Engineering Squadron had a storage 
disaster page 22 



News 



I Melcro Group Settles With Microsoft 

As the result of a lawsuit settlement, Microsoft 
will get an undisclosed sum from Meico Group, 
which manufactures Linux-based networking 
tools. MeIco Group is paying the amount to 
ensure indemnity for its Buffalo brand network- 
attached storage devices and routers. The suit 
is a result of Microsoft's complaints that parts 
of the Linux operating system infringe on Mi- 
crosoft's patents, although the company has 
yet to identify which patents are at issue. The 
Linux community strongly denies that its oper- 
ating system violates any patents and has pub- 
licly challenged Microsoft to name which 
patents are being infringed upon. 




I Yahoo! Revenue Drops, Profits Rise 

Things are looking up for Yahoo!, which report- 
ed a gain in net profit for the second quarter. 
Yahoo! shares increased year over year from 
$131 million, or 9 cents per share, to $141 mil- 
lion, or 10 cents per share. Revenue, however, 
dropped 13% to $1 .57 billion from a year ago. 
The company cites changes in exchange rates 
and the sale of its Kelkoo business last year as 
contributing factors to the decline in revenue. 
Without those factors, Yahoo! says the decline 
in revenue would only be 6%. Hoping to contin- 
ue the upward trend in profits, Yahoo! has also 
redesigned its home page to offer direct links to 
popular Web sites such as Facebook, Twitter, 
and eBay. 



I ElVIC Wins Data Domain Bidding War 

EMC has successfully outbid rival company 
NetApp to acquire majority ownership of Data 
Domain for $2.1 billion. Previously, EMC held a 
3.9% stake in the company; with this purchase, 
its percentage of ownership is now 82.1%. EMC 
emerged as the victor in a lengthy back-and- 
forth bidding war with NetApp, with which Data 
Domain had initially made an acquisition deal 
worth $1 .5 billion. Data Domain must pay Net- 
App a $57 million termination fee for breaking 
the agreement and moving forward with the 
EMC deal. 

I SAP To Buy SAF Shares 

SAP has announced plans to buy Swiss soft- 
ware company SAF Simulation, Analysis, and 
Forecasting AG for an offer of 1 1 .50 euros (or 
about $16.22) per share. SAF makes software 
engines for inventory management and has 
worked with SAP in the past and present, mak- 
ing the acquisition a natural one. Reportedly, 
there will be no job cuts for the 1 00 or so 
employees of SAF, and they will be able to 
remain in Switzerland. 

I IVIicrosoft & Verizon 

Not Favorites Among IT Professionals 

VendorRate's latest customer service survey 
of 1 ,500 IT and business professionals is out, 
and the news isn't so good for Microsoft and 
Verizon. Microsoft's ratings for the second 
quarter of this year, based on a perfect score 
of 100, were down in three areas: server and 
infrastructure, with a score of 55 (a 17% drop); 
operating systems, with a score of 67 (a 9.5% 
drop); and applications, with a score of 64 
(down 18%). Verizon Communications re- 
ceived the lowest ratings, with an overall 
score of 61. Additionally, Sprint Nextel and 
AT&T Wireless rated 64 and 67, respectively. 



WATCH THE msi 

STOCKS 



information provides a quick glimpse of current and historical stock 
IS and trends for 14 major companies in the technology market. 



Company 


Symbol 


Year Ago 


July 9$ 


July 23$ 


previous issue 


AMD 


AMD 


$4.36 


$3.48 


$3.59 


A 3.16% 


OA 


CA 


$23.41 


$16.56 


$19.12 


A 15.46% 


Cisco Systems 


CSCO 


$22.43 


$18.17 


$21.90 


A 20.53% 


Dell 


DELL 


$23.47 


$13.15 


$13.47 


A 2.43% 


Google 


GOOG 


$491.98 


$410.39 


$437.34 


A 6.57% 


HP 


HPQ 


$43.71 


$37.30 


$41.64 


A 1 1 .64% 


IBM 


IBM 


$128.53 


$102.08 


$117.06 


A 14.67% 


Intel 


INTC 


$22.01 


$16.02 


$19.48 


A 21 .6% 


McAfee 


MFE 


$32.89 


$40.14 


$44.15 


A 9.99% 


Microsoft 


MSFT 


$26.16 


$22.44 


$25.56 


A 13.9% 


Oracle 


ORCL 


$20.95 


$20.32 


$22.20 


A 9.25% 


Red Hat Software 


RHT 


$21.06 


$19.35 


$23.24 


A 20.1% 


Sun Microsystenns 


JAVA 


$10.43 


$9.20 


$9.22 


A 0.22% 


Synnantec 


SYMC 


$19.45 


$15.34 


$17.46 


A 13.82% 



IBM's Informix took top honors with a score 
of 96. 

I Google Profits, Revenue Up 

Second-quarter results from Google show a 
3% increase in year-over-year revenue, the 
company says. About two-thirds of the $5.52 
billion in revenue came from Google-owned 
sites, with AdSense partners making up the 
other third. A growing majority (53%) of rev- 
enue came from international sources. Net 
income for the quarter was $1 .48 billion on a 
GAAP basis, up from $1 .25 billion the year 
prior. Earnings per share also rose significant- 
ly from the second quarter of 2008. The com- 
pany reported about $19.3 billion in cash and 
liquid assets. 




NOTE: This information is meant for reference only and stiould not be used as a basis for buy/sell decisions. 



I Nortel To Sell Enterprise Solutions 
Business To Avaya 

Avaya has agreed to buy Nortel Network's 
enterprise solutions business unit for $475 mil- 
lion, according to a Nortel announcement. The 
sale of assets and shares to Avaya is a stalking 
horse agreement, meaning that other interest- 
ed parties could conceivably submit their own 
bids to usurp the acquisition. The deal, filed in 
Delaware bankruptcy court, followed a similar 
stalking horse sale of Nortel's LTE Access and 
CDMA assets a month before. 

I Internet Users In China 
Outnumber U.S. Population 

According to the China Internet Networking 
Information Center, the number of people 
using Internet services in China has sur- 
passed the entire population of the United 
States. Last month, China had 338 million 
Internet users, for whom the most popular 
uses were chatting 
1^^^^^^^^ on message boards, 
communicating 

I^^^^^^B sites, and browsing 
/ other types of online 

/ entertainment, includ- 

/ ^^^^^^^^^^ ing a 10% increase in 
/ the number of people 

watching videos. On 
the mobile broadband front, the number of 
people who used their cell phones to access 
the Internet rose to 155 million, but only one 
in four said that they will use 3G for Web surf- 
ing in the future. With the upswing of Internet 
users, China has also faced heightened mal- 
ware and security attacks. 
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News 



I HPToBuylBRIX 



HP has announced that it is acquiring IBRIX, a 
company that produces enterprise-scale file 
serving software. HP's interest lies in building 
its presence in the enterprise data storage, 
cloud storage, and file archiving markets— a 
goal HP believes IBRIX's products will help it 
achieve. IBRIX is a Massachusetts company 
with about 50 employees and more than 175 
corporate customers. HP says the deal should 
be complete in the next month, making IBRIX a 
part of HP's StorageWorks division in its 
Technology Solutions Group. 

I Q2 AMD Loss Still Beats Expectations 

Although revenue for chip maker AMD was 
down by 13% in Q2, its $1.18 billion in sales 
was still higher than the expected $1.13 billion. 
Even so, AMD saw a 21 % decrease in sales 
annually and a 17% drop in revenue in the first 
half of 2009 compared to numbers from the 
first half of 2008. Overall, Q2 saw a $330 mil- 
lion net loss and $249 million operating loss. 
AMD is cautiously optimistic about the upcom- 
ing third quarter, though it predicts that Q3 will 
reflect the uncertainty of the economy. By low- 
ering its capital expenditures, AMD hopes to 
mitigate its losses and assess its financial 
needs across the board. 

I VMware Posts Profit Loss In Q2 

Server virtualization company VMware reported 
a slight decline in revenue for the second quar- 
ter at $455.7 million and a net profit of $33 mil- 
lion, down from $52 million year over year. 
Second-quarter licensing revenue declined by 
20% to $222 million, which VMware attributes to 
the challenging economic environment. In gen- 
eral, growth has slowed since the company 
opened its doors to the public in 2007. In an 
effort to increase its profitability, VMware has 
increased its customer support staff by 20% 
and plans to ship add-ons for vSphere, which 
would update its desktop virtualization software. 

I Venture Capitalist Confidence 
On The Rise 

According to the Silicon Valley Venture Cap- 
italist Confidence Index, venture capitalists are 
showing more interest in the market for initial 
public offerings and entrepreneurs. The index 
hit 3.37 (on a five-point scale) in Q2— up from 
3.03 in the first quarter— and it was the second 
consecutive rise since the index hit a five-year 
low in the fourth quarter of last year. The 
Silicon Valley Venture Capitalist Confidence 
Index report notes that although IPO funding 
has been hard to come by, the second quarter 
saw an increase because the market for ven- 
ture-backed firms has reopened after two down 
quarters. 

I Windows 7 Will Benefit 
From Purchasing Recovery 

ChangeWave Research indicates that the IT 
buying recession may have bottomed out, as 
its recent corporate purchasing survey showed 
a 4% increase in the number of respondents 
who said their company would be buying new 
laptops or desktops during the third quarter. 
And because Microsoft is slated to launch 
Windows 7 on Oct. 22, the new release of Win- 
dows will likely be installed on many new desk- 
tops and laptops purchased by enterprises. 



ChangeWave also indicates that IT staff would 
be likely to use Windows 7 because 92% of the 
IT professionals currently running the Windows 
7 release candidate were satisfied with the new 
operating system. 




I iSuppli Predicts 
Microprocessor Sales Rebound 

In a sign that the chip inventory declines seen 
in the previous four quarters might be the last, 
iSuppli is predicting that microprocessor sales 
will uptick starting in the middle of this year. 
The analyst firm sees global semiconductor 
revenue up by 10.4% in 03 and 4.9% in 04. 
Intel and other chipmakers are reporting strong 
numbers that are beating analysts' estimates. 
According to an iSuppli researcher, adjust- 
ments made to inventories and prices during 
the rough market conditions in 01 and 02 have 
cleared the way smooth sailing for the remain- 
der of the year. 

I Facebook Results In Lost Productivity 

IT research firm Nucleus Research has re- 
leased a study that shows that Facebook is a 
productivity killer for workers. The survey of 
237 employees reveals that organizations that 
let users access Facebook during work hours 
lose an average of 1 .5% in productivity. Also, 
61% of the employees who use Facebook 
logged on during work hours, with some em- 
ployees spending as much as two hours of 
their work day on the social networking hub. 
A vast majority of those accessing Facebook 
at work (87%) admitted that their use was 
not for business purposes. Based on its find- 
ings. Nucleus Research advises restricting 
Facebook access as a means of recovering 
lost productivity. 

I IBM Dominates List 

Of Greenest Supercomputers 

According to Green500. org's recently released 
rankings of the planet's greenest supercomput- 
ers—ratings that lean heavily on a system's 
average number of operations per watt— IBM- 
built supercomputers hold 18 of the top 20 
spots, with the most efficient supercomputer 
being an IBM BladeCenter OS22 Cluster in use 
at the Interdisciplinary Centre for Mathematical 
and Computational Modeling at the University 
of Warsaw in Poland. Ranking fourth is a 
BladeCenter OS22/LS21 Cluster-based system 
at the Los Alamos National Laboratory that 
also recently ranked No. 1 on Top500. org's 
rankings of the world's most powerful super- 
computers. Overall, Green500.org indicates 
that the most recent rankings show that collec- 
tively the average efficiency increased by 10% 
while the aggregate power of the list increased 
by 15%. Green500.org says that although 
supercomputers are collectively consuming 
more power, they are using the power more 
efficiently than before. 

I Sun Stockholders Approve Merger 

Sun shareholders have OK'd the company's 
merger with Oracle. The deal, under which 
Oracle will acquire Sun for about $9.50 per 
share, was approved by about 62% of Sun's 
shares of stock. The total deal is expected to 
be worth $7.4 billion. The approval doesn't 
mean the merger is final, however, as the deal 
has not yet been approved by the Department 
of Justice, which announced in late June that it 
needed more time to work out final details, par- 



ticularly the way rights to Java are licensed, 
according to an attorney who works for Oracle. 

I IBM Reports Mixed Results 

Although IBM's second-quarter revenue was 
down, its earnings and full-year expectations 
are up. The company earned $3.1 billion last 
quarter, up 12% from $2.8 billion a year ago. 
However, its second-quarter revenue was down 
year over year, from $26.8 billion a year ago to 
$23.3 billion this year. The company now ex- 
pects its earnings per share this year to reach 
$9.70, up from the $9.20 a share it predicted 
earlier. Most groups within IBM reported year- 
over-year revenue declines. IBM's Systems & 
Technology division had one of the largest rev- 
enue drops, down 26% from a year ago. 

I Nearly 50% Of IT Organizations 
Plan Job Cuts 

Although many IT organizations plan to cut 
staff and budgets this year, a recent study from 
IT research and advisory firm Computer Eco- 
nomics indicates that 57.2% of IT managers 
find that their IT budgets are at least adequate 
to support their businesses. Still, Computer 
Economics' survey of 202 North American IT 
executives also found that IT layoffs are accel- 
erating this year, with almost half of all IT orga- 
nizations reporting that they are budgeted for 
fewer staff members than last year. Results 
indicate that 46% of North American IT organi- 
zations will cut staff this year, while just 27% 
will increase staff and another 27% will main- 
tain even levels with 2008 numbers. Addition- 
ally, 38% of companies surveyed indicate 
they'll cut IT operational spending this year. 




I Cisco Makes Job Cuts 

Cisco continued the restructuring and cost-cut- 
ting efforts CEO John Chambers announced in 
February, recently cutting between 600 and 
700 jobs. The cuts were primarily at its San 
Jose, Calif., headquarters, although other 
branch offices faced cuts, as well. In his origi- 
nal announcement. Chambers hinted that 
between 1 ,500 and 2,000 jobs would be elimi- 
nated before the end of the company's fiscal 
year. Cisco was mum on the details of the job 
cuts, including departments taking the cuts. In 
a statement, the company said it was "sensitive 
to the impact these decisions have on employ- 
ees during this challenging economic environ- 
ment" and that it is working to minimize the 
impact on employees. 

I Groups Collaborate To Set Cloud 
Computing Standards 

As more organizations are turning to the cloud 
for their enterprise needs, the Object Manage- 
ment Group announced that a group of stan- 
dards bodies has come together in order to 
define the standards of cloud computing. The 
group, dubbed the Cloud Standards Coordi- 
nation Working Group, is thus far composed of 
the Cloud Security Alliance, the Distributed 
Management Task Force, the Open Grid 
Forum, the Storage Networking Industry 
Association, and the Open Cloud Consortium. 
The group hopes to focus on many different 
aspects of cloud computing, including security, 
interfaces to infrastructure as a service, SLAs, 
data-exchange formats, and cloud computing 
taxonomies and reference models. 



Are you looking to learn more about data center 
or IT topics? Network with some of your peers? 

Consider joining a group of data center 
professionals. If you have an event you'd like 
listed, please send an email to 
feedback® processor.com. 



- AUGUST - 

AFCOM 
St. Louis "Gateway" Chapter 
Aug. 11 

Schneider Electric Technology Center 
807 Corporate Centre Drive 
O'Fallon, Mo. 
www.afcom.com/afcomnew/stlouis.html 



Greater Kansas City AFCOM 
Aug. 11 
Cerner Corp. 
3200 N. Rockcreek Parkway 

Kansas City, Mo. 
www.greaterkc-afcom.com 



AFCOM New England 

Aug. 12 
afcomnewengland.org 



AFCOM Central Ohio 
Aug. 12, 11:30 a.m. 
Columbus, Ohio 
www.afcomcentralohio.org 



AITP San Diego 
Aug. 12, 5:30 p.m. 
National University 
Kearny Mesa Campus 
3678 Aero Court, Room 217 
San Diego, Calif. 
sandiego.aitp.org 



AITP Washington D.C. 

Aug. 13, 6:30 p.m. 

Alfio's Restaurant 

4515Willard Ave. 

Chevy Chase, Md. 
aitpwashdc.ning.com 



ISSA Northeast Ohio 
Aug. 13, 8 a.m. 
Corporate College East 
4400 Richmond Road 
Warrensville Heights, Ohio 
neoissa.org 



AITP Southwest Missouri 
Aug. 18 
Springfield, Mo. 
aitpspringfield.org 

Oklahoma City 
AITP Chapter 
Aug. 18 
Oklahoma City, Okla. 
www.aitp.org/organization 
/chapters/chapterhome.jsp?chapter=40 



ISSA Oklahoma City 

Aug. 19 
Spaghetti Warehouse 
101 E. Sheridan Ave. 
Oklahoma City, Okla. 
www.issa-okc.org 



AITP Omaha 
Aug. 20, 5:30 p.m. 

Seraph Corp. 

Omaha, Neb. 
www.aitpomaha.org 



AITP Tarheel 
Aug. 20, 6 p.m. 
Foothill Brewery 

638 W. 4th St. 
Winston-Salem, N.C. 

www.aitp.org 



ISSA Upstate SC 
Aug. 21, 11 a.m. 
NuVox 

301 N. Main St., Suite 5000 
Greenville, S.C. 
www.upstate-issa.org/index.htm 



ISSA Des Moines 
Aug. 24, 11:30 a.m. 
1401 50th St., Suite 200 
West Des Moines, Iowa 



ISSA Baltimore 
Aug. 26, 4:30 p.m. 
Sparta Inc. 
7110 Samuel Morse Drive 
Suite 200 
Columbia, Md. 
www.issa-balt.org 



For more Upcoming IT Events, see page 7. 
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HP BladeSystem Matrix 

Delivered out of the box as a preintegrated platform, the 
BladeSystem Matrix creates pools of server, network, and 
storage capacity to be dynamically provisioned to run your 
applications on up to 1 ,000 physical or virtual servers, all 
managed as one environment. Ideal for simplifying consolida- 
tion initiatives, high-availability protection, and rapid deploy- 
ment to production environments, the BladeSystem Matrix 
brings together physical and virtual tools, processes, and 
architectures to affordably speed time to service delivery. 

Best for: Optimizing continuous consolidation, implementing 
internal cloud hosting or shared services models, and stream- 
lining operations for outsource service providers. 

• Unified tools to freely move and balance workloads across 
physical and virtual servers 

• Built-in capacity planning for all servers and Smart Solver 
technology gives best-fit advice for utilization of capacity 

• Enforce your best-practice architectural designs and processes 

• Simplify service and application delivery to lines of business 

• Provide streamlined service delivery with self-service portals 
for dedicated customers 

• Improve forecasting and capacity planning to your customers 

(800) 888-9909 | www.hp.com 




HP Integrity BL870C Server Blade 

Designed to support mission-critical application demands, 
the HP Integrity BL870c server blade brings the industry- 
leading reliability, availability, and security found in all HP 
Integrity servers to the HP BladeSystem c-Class. The 
BL870C offers dual-core Itanium processing capabilities, 
impressive memory expansion, and management tools 
that make it easy to deploy and maintain. ILO 2 
(Integrated Lights Out 2) Advanced Pack is standard with 
the BL870C and offers unprecedented ease in advanced 
remote server management. The Blade Edition includes 
a virtual KVM and graphical remote console at no addi- 
tional cost. HP Systems Insight Manager helps IT organi- 
zations save time with simple and reliable hardware infra- 
structure provisioning monitoring and control. 

Best for: Enterprises of all sizes, from large organizations 
to small branch offices and departments. 

• Up to 1 92GB DDR-SDRAM via 24 DIMM slots 

• High-performance HP zx2 chip set 

• Four hot-plug small form-factor SAS disk drives 

• Three mezzanine expansion slots to support a wide 
variety of I/O mezzanine cards simultaneously 

(800) 888-9909 | www.hp.com 



HP ProLiant DL1 65 G6 Server 

Functioning as a high-performance blade solution, the HP ProLiant DL165 G6 Server 
deploys on compute- and l/O-intensive environments. It features the six-core AMD 
Opteron processors to enhance its midmarket capabilities. In addition, it includes 
smart array controllers, high-efficiency power supplies, and high-efficiency proces- 
sors for maximum frequency without increased power consumption. 



Six-core AMD Opteron processors with 
increased performance 
Smart array controllers 
Higher-efficiency 500W power supplies for 
increased performance per watt and reduced TCO 
Optional redundant power supply 



• Essential management features 

• Tool-less rails for fast deployment in scale- 
out environments 

• Cost-optimized 1 U platform 

(800) 888-9909 | www.hp.com 



Best for: Compute- and l/O-intensive environments, Web serving, and midmarket 
server deployments. 




IBM BladeCenter HS21 



The IBM BladeCenter boasts quick installation to produce efficient results within the IT data center, and 
it's designed to fit well into any chassis with flexibility and power efficiency. The blade configuration is 
simple yet ideal for the data center, merging such technologies as the integrated systems management 
processor, light path diagnostics, and predictive failure analysis for optimal power management capabil- 
ities. To enable remote management, the BladeCenter HS21 
uses the IBM System Director to automate IT tasks from a 
single graphical interface. 



Best for: Data centers that need to add or change blades 
with little to no system interruption. 

Up to two high-performance dual-core or quad-core Intel 
Xeon processors 

Dual Gigabit Ethernet controllers featuring load-balancing 
failover 

SAS, iSCSI, Fibre Channel, Ethernet, and InfiniBand 
expansion capabilities 

Support for two internal SAS HDDs/SSD; hot-swap SAS 
HDDs; optional RAID 5 controller with cache 
Intel Hyper-Threading technology supports next-generation 
network application 

Fault protection, error checking, and correction for 32GB 
buffered DIMM internal memory (8GB DIMM support) 
Easy, reliable connection via dual redundant paths con- 
nected to passive midplane 

Higher availability and increased server uptime available 
through LED troubleshooting guide 



fifl 
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starts at $1,517 

(866) 883-8901 



www.ibm.com 
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IBM BladeCenter HS22 

IBM BladeCenter HS22 is an easy-to- 
use two-socket blade optimized for per- 
formance, power, and cooling that pro- 
vides high-speed I/O and support for 
high memory capacity and fast memory 
throughout. Featuring the latest Intel 
Xeon 5500 processors, the HS22 offers 
outstanding performance, flexible config- 
uration options, and simple management 
in an efficient server designed to run a 
broad range of workloads. 

Best for: Data centers with the goal of 
managing growth and maintaining platform 
stability. 

• More performance, more energy effi- 
ciency, and lower cost to run the most 
demanding applications 

• Exceptional power management with 
integrated tools such as the IBM Systems 
Director Active Energy Manager and Blue 
Path Cooling blade design 

• Increased uptime with integrated light 
path diagnostics and Predictive Failure 
Analysis, which detect component failure 
before failures occur 

Starts at $2,145 

(866) 883-8901 | www.ibm.com 
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IBM BladeCenter 
LS21 



In terms of green infrastruc- 
tures, the IBM BladeCenter 
LS21 is designed to perform 
with efficiency and precision. 
Its flexible configurations sup- 
port chassis, I/O, and storage 
options across the platform. 
To save energy without alter- 
ing performance results, the 
BladeCenter LS21 uses 25% 
less interior space due to its 
ultra-slim construction and high- 
density features. The IBM 
Director and IBM Director 
Extensions access essential 
system information, increase uptime and capabilities, 
and offer reliable system management 

Best for: Data centers interested in maximizing 
power efficiency by lowering consumption and occu- 
pying less space. 

• AMD Opteron processors draw less power than 
other standard server processors 

• Integrated dual Gigabit Ethernet connections 

• Integrated systems management processor notifies 
in advance of potential system failures 

• Supports Red Hat/SUSE Linux ES 9/Microsoft 
Windows Server 2003 and R2/Solaris 10A/Mware 3.5 

• Three-year onsite limited warranty that offers expert 
assistance and advice 



Starts at $1,241 

(866) 883-8901 



www.ibm.conn 



NEC Express5800 SIGMABLADE/120Bb-6 
Standard Blade Server 

NEC's Express5800 SIGMABLADE/120Bb-6 is a standard blade server 
designed to run applications requiring local hard drives. Engineered with virtu- 
alization in mind, the 120Bb-6 blade server includes two 1000BASE-X ports, 
an SUV connector, and an Intel 5000P chipset. 

Best for: Midmarket companies and enterprise branch offices. 

• Quad-core Intel Xeon processors 

• Up to 1 6GB of memory 

• Two hot-plug 2.5-inch SAS hard drive bays supporting RAID 0/1 

• Two 1000BASE-X ports 

(866) 632-3226 | www.necam.conn 




NEC Express5800 SIGMABLADE/120Bb-d6 
Diskless Blade Server 

The NEC Express5800 SIGMABLADE/120Bb-d6 is a highly modular, diskless 
blade server ideal for virtualization solutions at the lowest possible cost. 

Best for: IT managers looking to optimize virtualization and 
power consumption. 

• Quad-core Intel Xeon processors 

• Up to 48GB of memory 

• Two 1000BASE-X ports 

• Fibre Channel SAN boot 

(866) 632-3226 | www.necam.com 




NEC Express5800 SIGMABLADE/B120a 
Blade Server 

The NEC Express5800 SIGMABLADE/B120a features enhanced memory performance, 
including Intel's Quick Path Interconnect technology to increase performance and DDR3- 
1066 memory support for faster access. Utilizing the Intel Xeon 5500 series, the B120a 
blade server features a two-socket blade, application compatibility, and multiple configura- 
tion options. Other facets, such as integrated system management. Fibre Channel band- 
width expansion, and the modular design, offer greater functionality. 

Best for: IT managers seeking increased performance and reduced power consumption. 

• Higher throughput performance 

• Maximum memory configuration of up to 64GB 

• Expansion of up to six 1 Gb I/O ports per blade 

• Allows for server consolidation and overall reduced power consumption 

• EXPRESSBUILDER software includes OS installation utilities 

(866) 632-3226 | www.necam.com 





Sun Blade T6320 Server 
Module 

Powerful enough to run everything from back-office 
applications to Web services, the Sun Blade T6320 
server module with the Solaris 10 operating system 
is designed for fast deployment and maximum eco- 
efficiency, making it highly adaptable to changing 
data center needs. 



Best for: Data centers looking to increase deployment rates and go eco-friendly. 

• Up to 64 simultaneous compute threads per module with four- or eight-core UltraSPARC T2 processor powered by 
Chip MultiThreading technology 

• Increase application response times and reduce energy consumption with flash-based solid-state drives 

• Built-in, no-cost virtualization technology with Logical Domains and Solaris Containers 

• Hot-swappable disks and no fans or power supply units on the blade 

• Up to 79% greater performance, two times more core density, and three times more disk storage than competitive 
blade servers 



Starts at $9,520 

(800) 786-0404 



www.sun.com 



Sun Blade X6270 
Server Module 



Designed for enterprise data centers of all sizes. Sun 
Microsystems' Sun Blade X6270 server module with 
the latest Intel Xeon 5500 series processors is ideal 
for server virtualization, enterprise applications, and 
consolidation. Constructed with scalability in mind, 
the X6270 server module offers up to 144GB of mem- 
ory via 1 8 memory slots for 1 ,333 and 1 ,066MHz 
DDR3 DIMMs. 

Best for: Enterprises that want to utilize business appli- 
cation virtualization. 

• Designed for memory-intensive applications with up 
to 144GB of memory 

• All-in-one virtualization solution, including server and 
network, when combined with Sun Virtual Network 
Express Module 

• Up to two quad-core Intel Xeon 5500 series proces- 
sors (8 cores/16 threads) per server module 

• Double the I/O capacity of competing blades and 
rackmounts 

• Up to four hot-swappable hard disk drives or solid- 
state drives 

• Features four PCI Express 2.0 interfaces (through a 
passive midplane) 



Starts at $2,136 

(800) 786-0404 



www.sun.com 
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Network Managers 
Delay Next-Generation 
Application 
Deployments 

Network concerns, including performance- 
related issues, are delaying VoIP, unified 
communications, and IP-video deployments, 
according to a "State of the Path" report by 
Apparent Networks. 

The survey results indicate that more than 36% 
of network managers have delayed application 
deployments because of concerns about net- 
work performance. More than 60% of respon- 
dents specifically withheld VoIP rollouts, while 
42% cite video applications and 40% report 
unified communications as primary technolo- 
gies of concern. More than 70% of network 
managers surveyed say VoIP applications put 
the greatest pressure on networks. 

John Riley, director of product marketing for 
Apparent Networks, testifies to the stress 
placed on networks and their administrators. 
"The survey findings definitely indicate that 
today's extended network can easily get in the 
way of next-generation IT technologies," he 
says. "Network managers need to have a high 
degree of confidence that the end-to-end net- 
work can deliver consistent, high performance 
before deploying a next-generation application. 
Without the visibility into third-party networks, 
many network managers lack the confidence 
that their deployment will be successful and 
therefore delay its deployment." 

Out Of Control 

Next-generation applications typically require 
a lot from end-to-end networks and are 
essentially out of the network manager's 
direct control because of third-party owner- 
ship. In fact, more than 60% of survey re- 
spondents say issues outside of their own 
control are the biggest obstacle to deploy- 
ment of next-generation applications. 

"IT departments are clearly frustrated," Riley 
says. "The benefits of the next-generation 
applications are not in question, but the 
roadblock to deploy- 
ment is often network 
performance outside 
of a company's fire- 
wall." The reality is 
that network man- 
agers can't ensure 
performance be- 
cause of the lack of 
visibility and com- 
mand of the network 
infrastructure. 

According to Riley's assessment, "Network 
managers at businesses of all sizes, includ- 
ing SMBs, are concerned with the reliability 
and consistency of bandwidth delivered by 
third-party networks as well as their ability to 
guarantee end-to-end quality of service." 

Regardless of the difficulties facing network 
managers and deployment obstacles, next- 
generation solutions are key to efficient 
performance. "Next-generation technologies, 
including those that rely on the Internet, third- 
party hosted infrastructures, and cloud 
computing, provide enterprises tremendous 
advantages. They save cost and resources, 
they maximize internal resources, and they 
aid with disaster recovery," says Riley. 

He advises that "effective end-to-end man- 
agement is simply a must with these new 
distributed applications where latency is 
simply not tolerated." 

by Joanna Safford 




Going Green: A Primer 



Continued from Page 1 
streamline the bottom line. "Datasets are 
growing exponentially as more rich media 
moves over corporate networks and the 
Internet. The kind of computing horsepower 
needed to support that is growing, and com- 
panies are finding that it's expensive from 
both a capital and operations perspective." 

The Green Necessity 

With this in mind, Green IT isn't just a 
feel-good initiative. Instead, it's a key 
enabler of improved IT performance and is 
often the only way to meet fast-expanding 
business needs without busting the budget or 
disrupting operations. Frances Edmonds, HP 
Canada's director of environmental programs 
(www.hp.com), says we all need to broaden 
our understanding of Green IT. 

"There's a lot of green washing out there," 
says Edmonds. "Green IT means a lot of dif- 
ferent things, and it's not just buying a piece 
of hardware that has a higher energy efficien- 
cy rating. It also encompasses what materials 
were used to manufacture that product and 
how it will be recycled at end-of-life." 

More Than Power & Cooling 

Data center managers often focus green 
efforts on power and cooling. John Phelps, 
research vice president of servers with 
Gartner, says most organizations need 
greater visibility into how these resources are 
being used. 

"Many data centers aren't measuring how 
much energy they're using," says Phelps, 
citing a recent Gartner survey in which 70% 
of respondents did not have a separate IT 
budget line item for energy costs. "IT is often 
the company's largest user of energy, but 
Where's the incentive to cut back if there's a 
meter for the whole building but not on the 
data center itself?" 

Even with measurement in place, Phelps 
says many organizations remain myopic. 
Going green involves a much wider focus, 
including green data center infrastructure, 
recycling electronics and paper, alternative 
and renewable energy sources, green educa- 



tion for employees, carpooling, teleworking, 
and print reduction programs. 

IVIanage Resources Wisely 

Demand management — reducing the IT 
load by deploying applications and related 
resources more efficiently — is another 
promising area. Phelps says consolidation 
and virtualization, data deduplication, 
removal of equipment following decommis- 
sioning, and rightsizing of servers by avoid- 
ing overprovisioning can reduce inefficient 
usage that fails to drive productivity. I 

Jeffrey Hill, co-author of "Green IT For 
Dummies," says many data centers are 
already stuffed with too much equipment, 
and systems administrators don't know what 
they do and are afraid to pull the plug. He 
says they need to do precisely that. 

"A large computer manufacturer recently 
audited their corporate data center and found 
out that 35% of the applications running 
there could be either replaced, retired, or 
moved out into a workgroup environment, 
thus saving power, cooling, and valuable 
floor space," says Hill, who says IT doesn't 
have to dive head-first into virtualization to 
derive quick and inexpensive benefits. 

"Virtualization is such an industry buzz- 
word and the preferred solution to every ill 
that people tend to forget consolidation of 
physical servers, exclusive of virtualization, 
is a step that will yield similar results," says 
Hill. "Any reduction in the number of the 
physical servers will cause a reduction in the 
amount of power consumed and cooling 
required." 

Tiered storage that shifts lower-demand 
data away from energy-consuming high- 
speed and high-availability drives toward 
lower-availability — and more energy-effi- 
cient — storage is another alternative. So is 
application architecture. 

"There's a lot of code out there that's not 
very efficient, or it goes into a spin loop 
instead of a wait state and ends up driving 
some of this extra capacity," says Phelps. 
Tighter, more efficient code — ^reminiscent of 
the mainframe era, when compute cycles 



Where Do I Start? 



According to Frances Edmonds, HP Canada's 
director of environmental programs, tliere are 
several steps you can take to get started on the 
path to green IT. 

• Figure out where you are today. Assess 
current use of energy and consumables as 
well as asset disposal costs. Consider imple- 
menting green procurement guides and recy- 
cling policies. Use vendor-supplied tools and 
techniques to get started. 

• Align to corporate strategy. Use rapid ROI 
to justify capital spend during lean times. 

• Update acquisition processes. Build 
sustainability into procurement. Accelerate 
acquisition of newer, more efficient equip- 
ment to avoid runaway energy costs due 
to obsolete hardware. 

• Engage your employees. Green IT goes 
nowhere unless they're actively educated 
and bought in. 

were scarce and expensive — would consume 
fewer IT resources than today's relatively 
bloated apps. 

"Workload is the biggest consideration, 
and as workload goes down, electrical con- 
sumption goes down, as well," says Phelps, 
adding that newer, intelligent processors, 
UPSes, and other data center equipment will 
allow managers to dynamically power equip- 
ment down during low-demand periods. "In 
the past, all of this equipment would have 
used the same energy whether running under 
80% or 30% load." 

Don't Go Overboard 

As beneficial as Green IT can be to the 
bottom line, the BPM Forum's Kober warns 
against losing sight of underlying business 
needs. Overzealous greening of a data center 
can put operations at risk if it compromises 
infrastructure performance or availability. 

"Your environmental policies have to 
make sense," he says. "It's about mak- 
ing improvements in an organized and effi- 
cient way, and it really can be quite a bal- 
ancing act." 



Gauge Vulnerability Assessment Tools 



Continued from Page 1 
of replacement, cost of a breach, and cost 
of business loss. The final step is to add up 
the total cost for each device and determine 
the total risk involved for vulnerabilities. 

These suggestions go a long way in help- 
ing an SME determine which vulnerabili- 
ty tool is required for business operations. 
If the total cost for vulnerabilities is 
$100,000, then a $5,000 vulnerability tool 
makes sense to protect those assets. Davis 
also suggests asking key questions about 
business operations: whether you have a 
help ticket system and if the vulnerability 
tool needs to integrate into it, and whether 
you have a heterogeneous environment that 
requires a tool that crosses the divide 
between, say. Sun servers and those that 
run a Microsoft server OS. 

Calculate Overall Costs 

One of the hardest steps in evaluating 
vulnerability assessment tools is calculating 
total cost of a breach. As Davis suggests, it 
is partly a process of determining risks and 
associated costs. According to Dan Colby, 
president of Pinstripe (www. pinstripe 
services.com), an IT consulting company, 
most customers in the SME market take a 
look at lost revenue during a breach as the 
main factor in assessing vulnerability tools, 
because it's the most complicated, and 
important, calculation. 

"Lost revenue is largely impossible to 
accurately calculate, since you can't be sure 
what you are actually losing vs. deferring 
to a future time when systems are again 



available," says Colby. "Why wait to find 
out how much it is going to cost you? Be 
proactive to help ensure success." 

Open-Source Options 

One of the issues for an SME when it 
comes to examining the field for vulnera- 
bility assessment tools is that the appli- 
ances can be cost-prohibitive, especially for 
a small company with a server room. Terry 
Griffith, a network security consultant with 
Qwiff.net, says a good approach — short of 
examining each server and end-user com- 
puter — is to consider freely available open- 
source tools. 

Griffith says that one of his best tips for 
gauging vulnerability tools is to first know 
what you are assessing — he says assessment 
reports should match the reality of your net- 
work, systems, and other equipment. Edu- 
cating yourself about vulnerabilities can help. 
He recommends OSVDB.org as a source for 
info on security issues facing the industry. 



Vulnerability Assessment Appliances 

Fortinet' s James says it is critical to look 
I for soft spots in networks. According to 
James, most SME customers don't have the 
resources to constantly update endpoint 
security or the skillset to understand the 
complexities of each component, such as 
database vulnerabilities, Web server securi- 
ty issues, and end-user computing patch 
processes. 

"Most SMEs need a way to do discovery 
on their networks and conduct an inventory 
assessment in a clientless way," says James. 
"They do not have time to push out updates 
for every Microsoft or Adobe hotfix and to 
learn about compliance and continually stay 
up-to-date against vulnerabilities." 

In the end, a thorough analysis of neworks, 
a process for determining the costs of the 
network, and deciding between open-source 
and commercial options will help an SME 
assess vulnerability options, 



Proof-Of-Concept Testing 



Another step in evaluating security vulnerabili- 
ty options is to work closely with a vendor, 
request detailed information about the prod- 
uct, and then do a hands-on assessment of 
the security product itself in a proof-of-concept 
lab. "SMEs have two approaches for assess- 
ing the risk of an appliance," says Morey 
Haber, the VP of business development at 
eEye Digital Security (www.eeye.com). "The 



first is requesting a formal statement from the 
vendor regarding device hardening, encrypted 
communications, and security updates when 
new vulnerabilities are detected. The second 
is performing vulnerability assessment of 
an actual appliance to determine its risk sur- 
face and security best practices for complex 
passwords and unnecessary open ports or 
exposed services." 
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You Have The Power 



10 Things You Can Do 

To Reduce Data Center Power Use 



by Elizabeth Millard 

Power usage is one of the biggest con- 
cerns for a data center, particularly because 
it involves so many other aspects of opera- 
tions, such as heating and cooling, network 
efficiency, and monitoring. Here are 10 
ways to reduce power use 
without negatively affecting 
the data center. 

Do An Onsite Audit 
& Modeling 

An audit can help identi- 
fy areas of inefficiency, 
says Greg Stover, senior 
vice president of sales at 
NER (www.nerdata.com). 
The audit should take into 
account items such as room 
layout, rack-by-rack IT 
equipment densities, CRAC 
type and location, total 
equipment power consump- 
tion, point temperatures 
throughout the room, cut- 
outs, and leakage. Stover 
says, "Next, a modeling 
process with many itera- 
tions and scenarios can help 
you develop a complete 
thermal solution for the 
data center that prevents 
excess power use." 

Separate Hot & Coid 

A major source of inefficiency and power 
waste comes from mixing hot exhaust air 
with cold supply air, says Al Zoldos, vice 
president of sales at Staples Technology 
Solutions (www. staplestechnology solutions 
.com). To minimize air mixing, he recom- 
mends employing a hot aisle/cold aisle con- 
figuration to separate the two. Blanking 
panels in the cabinets can also be used to 
prevent hot air from mixing with cold air 
passing through the cabinet. 

B\ock Aii Bypass Air 

According to Ben Stewart, senior vice 
president of facilities engineering at 
Terremark (www.terremark.com), bypass 
air is cold supply air from the CRAC that 
gets back to the return without passing 
through a perforated tile. Likely places to 
find bypass air are in cable openings in the 
raised floor or below floor openings. Close 
holes in the raised floor and strategically 
locate perforated tiles and baffles. 



Overall Action Plan 



According to Joe Polastre, CIO and co- 
founder of energy management firm Sen- 
tilla (www.sentilla.com), data centers can 
reduce power usage by using the "measure- 
analyze-act" system: 

• Measure: Arm yourself with as much in- 
formation as is practical and set a baseline 
for consumption. 

• Analyze: Identify offenders, waste, and 
unknowns and uncover trends. 

• Act: Adjust operations, schedules, and 
cooling; replace, repair, and turn off 
offending equipment; and adopt auto- 
mation solutions. 

Polastre says that through the "measure- 
analyze-act" system, SMEs can maintain 
optimized energy usage, reduce their carbon 
emissions, and lower their costs. 



Use Variable-Frequency Drives 

Stewart also recommends the use of vari- 
able-frequency drives because data center 
managers can select the precise speed they 
need. Slowing a motor by only 12% cuts its 
power usage in half, he notes. 




Go European 

Another tip from Stewart is to adopt the 
European voltage distribution model. 
Rather than powering the data center at 
208/120VAC, employ 400/240VAC. 
"Server power supplies will accept the 
higher voltage just fine, and this reduces 
the number of transformers required," says 
Stewart. "This reduces transformer losses 
and reduces power consumption." 

Integrate Sensors Into The Mix 

Data center instrumentation should 
include sensors that allow a data center man- 
ager to monitor heat generation, power con- 
sumption, and cooling effectiveness, notes 
Kris Domich, principal consultant at 
Dimension Data (www.dimensiondata.com). 
He says, "Tools that provide information 
pertaining to where heat is being generated, 
as well as how much power is being deliv- 



effective temperature control. Michael 
Hogan, global offering manager of site and 
facilities services at IBM (www.ibm.com), 
compares data centers to meat lockers that 
are set at lower temperatures throughout to 
deal with specific hot spots. He recom- 
mends using outside air to cool the data 
center in addition to raising temperature set- 
tings by a few degrees, which he believes 
can result in a savings of up to 10%. 

Enable Power Management 
Settings On PCs 

The EPA estimates that 
machines are sitting idle 
during 58% of a business 
day, points out Nick Cava- 
lancia, vice president of 
Windows management at 
ScriptLogic (www. script 
logic.com). He believes IT 
managers should configure 
power management settings 
to conserve energy by turn- 
ing off desktop monitors 
after at least 15 minutes of 
inactivity and putting com- 
puters on standby/sleep 
after an hour. Cavalancia 
says, "Utilizing the sleep 
mode prevents people from 
losing unsaved work if they 
left an application open and 
allows the workstations to 
receive upgrades at off-peak 
times." Windows offers 
control of some power man- 
agement settings, but there 
are also third-party tools 
that allow for more granular control to 
selectively implement settings that work for 
each department. (For more information on 
power management, see "Conserve Power 
At Rest" on page 8.) 

Shut Down Inactive Machines After Hours 

Another EPA fact: Only 36% of machines 
are turned off at night. Cavalancia says 
that's wasted energy of about 16 hours per 
day on weekdays and 24 hours per day on 
weekends. Using a solution that measures 
computer inactivity and automatically shuts 
down the machine could bring formidable 
power usage savings. 

Tap Into Incentive Programs 

If a data center needs a bit more budget 
money for employing power- saving strate- 
gies, it's worth the time to do some 
research on an area's incentive programs. 
Local, state, and regional utility companies 
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"Tools that provide information pertaining 
to wliere lieat is being generated, as well 
as how much power is being delivered and 
consumed within the data center as a whole 
and in specific parts, will allow you to 
more finely tune your power distribution 
and cooling capabilities." 



- Dimension Data's Kris Domicii 



ered and consumed within the data center as 
a whole and in specific parts, will allow you 
to more finely tune your power distribution 
and cooling capabilities." 

Set A Higher Temperature 

Just as setting the temperature in a home 
a little higher in the summer and a little 
lower in the winter saves power usage, a 
data center can save power usage through 



continue to implement programs that offer 
business customers incentives for reducing 
energy consumption, notes Cavalancia. IT 
administrators should contact their utility 
company or management software vendor 
to see if the company might be eligible. 
Some programs offer rebates on energy 
bills, while others reimburse the cost of 
preferred power management solutions or 
energy-efficient hardware. 
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- SEPTEIVIBER - 

AFCOM Central Ohio 
Sept. 9, 11:30 a.m. 
Columbus, Ohio 
www.afcomcentralohio.org 



AITP-Central Idaho 
Sept. 9, 11:45 a.m. 
Owyhee Plaza Hotel 
1109 Main St. 
Boise, Idaho 
www.boisestate.edu/dpma/dpmaci 
/centida.html 



AITP San Diego 
Sept. 9, 5:30 p.m. 
Cloud Computing Event 
San Diego, Calif. 
sandiego.aitp.org 



AITP Washington D.C. 

Sept. 10, 6:30 p.m. 

Alfio's Restaurant 

4515 Willard Ave. 

Chevy Chase, Md. 
aitpwashdc.ning.com 



ISSA Northeast Ohio 
Sept. 10, 8 a.m. 
Corporate College East 
4400 Richmond Road 
Warrensville Heights, Ohio 
neoissa.org 



AITP Garden State 
Sept. 15 

www.aitp.org/organization/chapters 
/chapterhome.jsp?chapter=21 



AITP Southwest Missouri 
Sept. 15 
Springfield, Mo. 
aitpspringfield.org 



ISSA St. Louis Chapter 
Sept. 15 
St. Louis, Mo. 
stl.issa.org 



Oklahoma City AITP Chapter 
SepL 15 
Oklahoma City, Okla. 
www.aitp.org/organization/chapters 
/chapterhome.jsp?chapter=40 



AITP Northeastern Wisconsin Chapter 
Sept. 16, 4:15 p.m. 
Holiday Inn Select 
150 S. Nicolet Road 
Appleton, Wis. 
new.aitp.org 



ISSA New Jersey 
SepL 16 
nj.issa.org 



ISSA Oklahoma City 

SepL 16 
Spaghetti Warehouse 
101 E. Sheridan Ave. 
Oklahoma City, Okla. 
www.issa-okc.org 



AITP Greater Boston 

SepL 17 
www.bostonaitp.org 



AITP Omaha 
Sept. 17, 5:30 p.m. 

Seraph Corp. 

Omaha, Neb. 
www.aitpomaha.org 



AITP Tarheel 
Sept. 17, 6 p.m. 
Foothill Brewery 

638 W. 4th St. 
Winston-Salem, N.C. 

www.aitp.org 



Boston Society for Information Management 
SepL 17 

www.simnet.org/Chapters/Northeast 
/Boston/tabid/78/Default.aspx 

- OCTOBER - 

Data Center World 
Oct. 4-7 
Orlando, Fla. 
www.datacenterworld.com 



Data Center 

V\y D R L D 
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Conserve Power 
At Rest 



Power Management Software Puts The Brakes On 
Power Loss During Off Hours 



by Kurt Marko 

Long before the current recession 
turned corporate CFOs and their IT depart- 
ments into penny-pinchers, many enter- 
prises launched sustainability offices to 
reduce the environmental impact of their 
activities and products while enhancing 
their green credentials. So it's strange that 
one of the simplest energy-saving steps 
available — using PC power management — 
remains so rare. 

According to a recent Forrester survey 
of IT professionals, led by analyst Doug 
Washburn, only 13% have widely scaled 
PC power management programs, with 
more than half admitting to no policies or 
plans. Steve Ryan of the EPA's Energy 
Star program says this is likely due to 
it's poor experience with early imple- 
mentations of low-power modes, but with 
heightened industry concerns over their 
finances and environmental images, he's 
seeing increased interest in PC power 
management. 

PC hardware and Windows have sup- 
ported advanced low-power operating 
states for years, and although many users 
enable power management on their own 
volition, Brett Goodwin, vice president of 
marketing and product management at 
Verdiem (www.verdiem.com), says such 
do-it-yourself approaches to reducing PC 
energy usage invariably fail for several 
reasons. First, they provide no means of 
benchmarking usage and improvements 
over time; second, they're prone to users 
overriding standard power configurations; 
and finally, they're labor-intensive for IT 
to maintain. These shortcomings have 
prompted a new class of enterprise soft- 
ware designed to measure and control PC 
power states. 

Benefits Of Power Management 

The benefits of centralized PC power 
management are many and compelling. 
The largest and most obvious is reduced 
electricity usage. Although many IT pros 
may think PCs a trivial energy consumer 
compared with servers and disk arrays, 
several studies have found that more than 



' Although many 
IT pros may think 
PCs a trivial energy 
consumer compared 
with servers and 

disk arrays, 
several studies 
have found that 
more than half of 
IT'S electricity 
consumption 
occurs outside the 
data center. 



I half of it's electricity consumption occurs 
outside the data center. Furthermore, Ryan 
says about half of that energy is wasted. 
He cites other benefits of power manage- 
ment, including lower cooling loads (par- 
ticularly in southern climates where the 
savings can be upward of 30%); reduced 
peak electricity usage, which can be signif- 
icant in areas with utilities making peak 
demand surcharges; and better environ- 
mental stewardship. 



figuration, and deployment are about 
$5 per seat, which, given the savings 
potential, means a payback time far less 
than a year. 

Another benefit of aggressive PC power 
management that's harder to quantify is an 
improvement to a firm's "green" image. 

Power Management Software Criteria 

According to Terrence Cosgrove, an ana- 
lyst at research firm Gartner, enterprise PC 
power management tools should allow IT 
to both measure, report, and track over time 
their PC's energy consumption and "man- 
age PC power states without disrupting 




Various estimates cited by the EPA, ana- 
lysts, and vendors put the typical energy 
savings for power-managed PCs at 30 to 
60%, which averages to about $40 per sys- 
tem per year. According to Ryan, for an 
enterprise with 1,000 systems, this is 
enough electricity to light 240 homes and a 
reduction in greenhouse gas emissions 
equivalent to 60 cars. 

Given the relatively modest cost of 
enterprise power management software, 
the ROI is impressive. Ryan sees most 
commercial solutions running $3 to $15 
in quantity and estimates that IT's labor 
costs for product evaluation, testing, con- 



user productivity or desktop support 
processes." He says products share a num- 
ber of common features buyers should con- 
sider, such as auditing and logging PC 
energy use and power states, aggregating 
and reporting data to document savings, 
supporting wake-on-LAN to allow sus- 
pended systems to be remotely activated 
during off hours for maintenance (backups, 
patching, malware scans), and performing 
"graceful" power state transitions or 
reboots to avoid losing data from open 
applications. 

Acknowledging the varied and heteroge- 
neous nature of enterprise users, Cosgrove 



IVIyths Of PC Power IVIanagement 
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• More than half of most companies' IT ener- 
gy usage is in the office, not the data cen- 
ter, yet fewer than one in seven companies 
have deployed a PC power management 
solution. 

• Commercial power management software 
offers the flexibility to handle various usage 
and application scenarios, and wake-on- 
LAN technology ensures that hibernating 
PCs don't interfere with off-hours adminis- 
trative tasks. 

• Power management software is expected 
to evolve to include peripherals and net- 
work devices and is also being built into 
client management software suites, even- 
tually obviating the need for standalone 
products. 



adds that products also allow administrators 
to create power profiles for various user 
categories and work schedules. For exam- 
ple, call center agents, who need instant 
access to the PCs, could have low-power 
states completely disabled during the work 
day vs. aggressive settings for clerical 
office workers. 

Washburn and Cosgrove both note that 
many popular PC client management soft- 
ware suites, which have traditionally been 
used for application and security adminis- 
tration, have added power management 
modules to the mix. Although these typi- 
cally can't match the depth of features 
found in dedicated power management 
products, they are a convenient solution 
for organizations having already deployed 
the suite. Cosgrove believes most organi- 
zations will find "good enough" capabili- 
ties from their incumbent vendor, and he 
cautions that "organizations evaluating PC 
power management point solutions should 
consider them a tactical two- to three-year 
investment." 

Recognizing the competitive threat, 
vendors are continuing to enhance their 
offerings. Washburn sees the market as 
evolving from PC to IT power manage- 
ment solutions. Goodwin shares this 
vision and notes that although today's 
products manage only desktops, laptops, 
and monitors, power management ven- 
dors would eventually like their offerings 
to be able to control power states of 
everything from printers and other periph- 
erals to network hardware such as Wi- 
Fi access points, non-core switches, and 
IP phones. 

Although ad-hoc policies encouraging 
employees to configure Windows' built- 
in power management are better than 
nothing, they can't deliver the savings and 
compliance of a centrally managed com- 
mercial solution. With low deployment 
costs, rapid payback, and eligibility 
for utility rebates, PC power management 
projects are in Goodwin's words "a 
no brainer." 



Preconceived notions about power management often serve as stumbling blocks to adoption. Here are a few common myths debunked by research 
aggregated by the U.S. Environmental Protection Agency's Energy Star program (www.energystar.gov) in its FAQs. 



Myth Or Objection 



The power used turning my PC on negates 
any benefits of turning it off. 

My screen saver is saving me energy. 



Turning my PC on and off will reduce its 
performance and useful life. 



I 



Reality 



In reality, the small surge of power created when some devices are turned on is vastly smaller 
than the energy used by running the device when it is not needed. 

Screen savers generally do not save energy. In fact, certain graphics-intensive screen savers 
can cause the computer to burn twice as much energy and may actually prevent a computer 
from entering sleep mode. 

Modern computers are designed to handle 40,000 on/off cycles before failure, and you're not 
likely to approach that number during the average computer's five- to seven-year life span. 
Some studies indicate it would require on-off cycling every five minutes to harm a hard drive. 
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LEED-ing The 
Green Revolution 



LEED Certification Gives SMEs A Roadmap 
For Energy Savings & Environmental Friendliness 



by Sixto Ortiz Jr. 

Today, operating in such a way that 
takes care of the environment is an impor- 
tant driver for enterprises, because while 
everyone supports the noble causes of reduc- 
ing pollution, combating global warming, 
and operating in environmentally friendly 
ways, the bottom line is that operating in a 
"green" manner can help enterprises save all 
kinds of money. 

This is especially true for data centers, 
which by virtue of their primary function are 
tremendous consumers of energy. Consum- 
ing and wasting massive amounts of energy 
is not just poor environmental stewardship, it 
is also a vast money-sucking black hole. 

Enterprises that want to build and operate 
green data centers can use the LEED (Lead- 
ership in Energy and Environmental 
Design) certification process to validate 
environmentally responsible building 
and operating practices while realizing 
significant savings. Here is a look at the 
certification process and the value it 
can deliver to today's data centers. 

A Green Stamp Of Approval 

LEED is an independent, third party- 
verified, voluntary, and internationally 
accepted benchmark for the design, 
construction, and operation of high- 
performance, energy- and resource- 
efficient green buildings, says Marie 
Coleman, communications coordinator 
for the USGBC (U.S. Green Building 
Council; www.usgbc.org), the organi- 
zation that created the LEED certifica- 
tion process. 

According to Coleman, projects 
registered under one of the LEED rating 
systems must achieve a minimum number 
of credits/points among six environmental 
categories: Water Efficiency, Energy & 
Atmosphere, Indoor Air Quality, Materials 
& Resources, Innovation & Design, and 
Site Selection. The total number of points 
earned by a project dictates the level of cer- 
tification achieved (Certified, Silver, Gold, 
or Platinum), she says. 



Klaas Rodenburg, a member of Stantec's 
Buildings Engineering Group (www.stantec 
.com) and a former president of the Alberta, 
Canada, Green Building Council, says the 
Certified LEED rating requires 40 to 49 
points, the Silver rating requires 50 to 59 
points, the Gold rating requires 60 to 79 
points, and the Platinum certification 
requires more than 80 points. And, he 
warns, there are also eight prerequisites that 
must be achieved to get a certification; miss 
any of them, and LEED certification at any 
level cannot be obtained. 

USGBC s Coleman says there are four 
LEED rating systems: Green Building 
Design and Construction, Green Interior 
Design and Construction, Green Building 
Operations and Maintenance, and LEED for 
Residential and Neighborhood Development. 




VttDCERTIF/fo 



Taking The LEED 



The Fannie Mae UTC (Urbana Technology 
Center), a 247,000-square-foot data center I 
and office building designed by Gensler (www 
.gensler.com), was dedicated on Aug. 4, 2005, 
and was the first facility in the U.S. to obtain a 
LEED rating. 

Features that helped the Fannie Mae UTC earn 
this certification include: 

• All mechanical, electrical, and computer sys- 
tems rated for maximum energy efficiency 

• Low volatile organic compound paint and 
carpeting 

• Countertops composed of recycled materials 
and sustainable wood | 

• Landscaping with native and drought-tolerant 
plants to enhance water conservation 

• Irrigation design using water from captured 
rain and evaporator cooling towers, resulting 
in municipal water savings of 13,000 gallons 
per day 

• Provision of shuttle service from Fannie I 
Mae's Washington, D.C., headquarters to 

the UTC to minimize vehicular traffic. 



But, according to John Cantrell, interior 
design technician and LEED AP (accredited 
professional) specialist with HOK Atlanta 
(www.hok.com), the USGBC is in the mid- 
dle of a certification system switchover, so 
there may be slight changes to the certifica- 
tion system terms and options when LEED 
v3 comes out. 

Why LEED? 

Enterprises may reasonably ask them- 
selves why they should pursue the LEED 
certification for a data center. According to 
the USGBC 's Coleman, "data centers have 
become a 'hot topic' where LEED is con- 
cerned because they are among the highest 
consumers of energy and yet there is so 
much interest from data centers to consume 
less and find ways to be more sustainable." 

In fact, she adds, the USGBC is finding 
that interest in LEED certification is peak- 
ing because building green saves money 
over the life cycle of the building. Accord- 
ing to Coleman, electric bills for LEED- 
certified buildings average 26% less, while 
operation and maintenance costs are lower 
by 13% on average. 

Don M. Jones, LEED AP and principal at 
EwingCole, an architecture, engineering, 
interior design, and planning firm, says 
designing sustainable buildings uses 
resources efficiently and provides healthy 
environments for people that can produce 
financial savings, especially when measured 
over the life of the building. These savings, 
he adds, include energy costs as well as 
human health costs delivered by enhanced 
work efficiency and reduced lost days. 

"For data centers, reductions on utility 
could be significant; for instance, if you can 



Key Points 
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LEED is a system of design, construction, 
and operations standards that can be third 
party-verified to certify that an enterprise 
is using green best practices for building 
design, construction, or operation. 

A key to success in LEED certification is 
bringing together an integrated design 
team knowledgeable on green strategies 
to explore the greening opportunities avail- 
able to a project. 

Although LEED certification of new con- 
struction is certainly a worthy goal, there is 
a vast opportunity to enhance the environ- 
mental friendliness of existing buildings 
and/or structures. 





recover some of the heat that's generated by 
servers' exhaust stream and use it to heat 
buildings in the winter, that's a clear bene- 
fit," says Jones. 

Also, it is important to note that LEED 
certification is entirely doable for existing 
buildings. Candace Say, a LEED AP at the 
SmithGroup, a Detroit-based architecture 
firm, says LEED has several certification 
"tracks," including certification of spaces 
located in existing areas (LEED for Interior 
Design and Construction) and certification 
for buildings not making any construction 
changes but simply looking to change 
the way they operate (LEED for 
Existing Building Operations and 
Maintenance). 

Statistics strongly prove the case that 
existing buildings present a great op- 
portunity for green enhancements. 
According to the USGBC, in the United 
States alone, buildings account for 72% 
, of electricity consumption, 39% of ener- 
A gy use, 38% of all carbon dioxide emis- 
sions, 40% of raw materials use, 30% of 
waste output, and 14% of potable water 
consumption. 

Achieving LEED Certification 

In a nutshell, LEED certification 
begins by registering a project and pay- 
ing a fee at the certification Web site 
(www.gbci.org), says Cantrell. The 
GBCI moniker refers to the Green 
Building Certification Institute, the third- 
party certification arm of the USGBC, he 
adds. 

However, there is some work that must be 
done prior to registration. Enterprises wish- 
ing to pursue the LEED certification should 
start with a consultant and/or engineer who 
determines what the goals of the project 
ought to be, says Tom Coalson, a sustainable 
construction speaker at Thomas Coalson 
Consulting & Training and a LEED AP. 
Then, he adds, the engineer conducts an audit 
of the building's systems; once the audit 
results are examined and a course of action is 
planned and budgeted, says Coalson, the pro- 
ject is registered. 

When a LEED project is registered, says 
Stantec's Rodenburg, the registrant indicates 
the LEED level (Certified, Silver, Gold, or 
Platinum) that they wish to achieve. The 
design team then designs a facility that in- 
corporates the LEED credits outline in the 
project brief and documents those. During 
construction, contractors also document a 
number of LEED credits (such as construc- 
tion waste management) and also provide 
assurance that materials used for construction 
meet LEED criteria for recycled content and 
VOC (volatile organic compound) emissions, 
says Rodenburg. 

Once a building is commissioned and it 
is operating according to design, the build- 
ing design team submits the appropriate 
documentation to the LEED assessors, who 
provide the final determination of the 
points and certification achieved. Only the 
USGBC or the CaGBC (Canadian Green 
Buildings Council; www.cagbc.org) can 
make the final determination regarding cer- 
tification, he adds. 



Cisco Survey Finds 
Tliat Teleworl(ing 
Can Improve 
Employee Morale 
& Productivity 

According to survey data from Cisco, small 
to midsized enterprises should give serious 
consideration to the growing trend of 
telecommuting. The in-depth survey, which 
polled about 2,000 of its teleworkers 
representing five different regions 
worldwide (Asia Pacific, emerging markets, 
Europe, Japan, and North America), was 
conducted in an effort to gauge the impact 
of teleworking on the social, economic, and 
environmental lives of employees. The 
results of the survey indicate that 
teleworking is not only viewed as desirable 
by employees, but it can also affect a 
company's bottom line. 

About 69% of the employees surveyed feel 
they are more productive while working 
from home, and 83% say that their 
communication and collaboration abilities 
with other employees are at least as good 
from home if not better. The survey also 
indicates that teleworking is personally 
satisfying: 91% of respondents say that 
teleworking contributes to their overall 
satisfaction, and 80% feel it improves the 
quality of their lives. 

Benefits Beyond 
Employee Satisfaction 

it's not just employee morale and work 
efficiency that has piqued Cisco's interest in 
teleworking. The company estimates that it 
saves $277 million annually by having so 
many teleworkers and believes that dollar 
amount will continue to grow. 




Further, telecommuting is a green 
endeavor. Workers who commute to the 
office average anywhere from 14 to 46 
miles round-trip, pumping out greenhouse 
gas emissions all along the way. Cisco 
estimates that its teleworkers alone 
prevented about 47,320 metric tons of 
emissions by working from home in 2008. 
And, of course, the savings in fuel costs 
and time spent commuting are attractive 
to employees, as well. 

According to the survey, the average Cisco 
employee spends two days every week 
telecommuting, and 40% live in a different 
city than their manager. 

by Seth Colaner 
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Switch It Up: 

Look At KVM Switches 






ATEN CN8000 KVM On Ttie NET 

The CN8000 adds "over IP" abilities to KVM switches 
that don't offer built-in IP functionality. Operators can 
monitor and access their computers from remote 
locations via a browser-based Windows client or 
Java applet. 

Best For: SMEs that want a cost-effective way to 
add remote access to an existing KVM switch. 



• Provides remote access to a KVM 

• Hardware-based, eliminating the need for a work- 
ing operating system on the local computer 

• Virtual media and dial-up support 

• Enhanced frames per second throughput for crisp, 
responsive video display 

$599.95 

(888) 999-2836 
www.aten-usa.com 




ATEN KH2516Altusen KVM Switch 

ATEN's Altusen CAT 5 High Density Switch features 16 computer 
port configurations for complete KVM connectivity from a CAT 
5e/6 cable. The KH2516 is housed in 1 U form factor for conve- 
nient rack mounting. 

Best For: IT administrators who need to control a large group of 
computers from a single KVM. 

• Capable of expansion to provide control of up to 4,096 
computers 

• Dual bus consoles for two simultaneous and independent 
operators 

• CAT 5 links up to 130 feet between KVM and servers 

• Allows for port-by-port setup of user account access rights 

$799.95 

(888) 999-2836 
www.aten-usa.com 



ATEN KN4140V 
Altusen KVM Over The NET 

This Altusen KVM Over The NET switch offers 
dual onboard NICs and dual power supplies for 
24/7 reliability. It also includes four temperature 
sensors to regulate up to six fans based on 
room temperature. 

Best For: IT managers who need to reliably 
manage server rooms and data centers from 
a distance. 



• Monitor screen displays of up to 40 servers 

• On-screen keyboard selection 

• Dual LAN and power ports 

• Resizable screen for remote use 

$7,195.95 

(888) 999-2836 
www.aten-usa.com 





ATEN KH1 51 6i Altusen 
KVM Over The NET 

This control unit uses TCP/IP as a communication protocol 
to let IT staff access computers connected to the Internet. 

Best For: Administrators looking for a KVM switch that can 
provide IP access via LAN, WAN, or the Internet. 



• A message board feature allows logged-in users to com- 
municate and take exclusive control of the KVM functions 

• CAT 5 to reduce cable clutter 

• Dedicated chain ports let you expand support as your 
business expands 

• 1 6 ports 

$949.95 

(888) 999-2836 
www.aten-usa.com 



BelkinF1DN102DOmniView 
Secure DVI KVM Switch 

Designed for military, intelligence, and federal 
agency installations, this two port OmniView Secure 
DVI KVM Switch is NIAP-certified to ensure data 
integrity when switching between computers operat- 
ing at different security levels. 

Best for: Those who must conform to the latest 
security protocols when switching between 
two computers. 

• Supports Common Criteria EAL 4+ and aug- 
mented with ALC_FLR.3 

• Dual-link DVI-D delivers video resolution up to 
2,560 X 1 ,600 

• No memory buffer 

• Nonreprogammable firmware 

$499 

(800) 223-5546 
www.belkin.com 
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Compiled by Nathan Lake 



BelkinF1DP232G OmniViewlP 
5232K KVM Switch 

The OmniView IP 5232K KVM Switch can control up to 32 
servers. Up to two administrators can remotely access the 
switch as well as one local administrator. 

Best For: Enterprises that need to give multiple adminis- 
trators remote access to computers connected to the KVM 
switch. 

• Provides access from LAN, WAN, or Internet when 
using Firefox or Internet Explorer 

• Out-of-band BIOS-level access 

• Remote hard reboot 

• Support for virtual media technology for up to two servers 
$3,199 

(800) 223-5546 
www.belkln.com 



Black Box KVIP2032A 
ServReach KVMultiport 
KVMolP 



The 2 X 32 ServReach KVMultiport KVMolP enables 
one local and two remote users to access and control 
up to 32 servers over the Internet. The units extend 
KVM switching up to 100 feet over CAT 5 cable to 
your servers. 

Best For: Enterprises that need BIOS-level control of 
USB or PS/2 servers. 




• Troubleshoot, reboot, manage, or configure your 
servers from anywhere in the world 

• No software to install; only needs Internet Explorer 
6.0 or higher 

• 1 U high to rackmount in server cabinet 

• Supports 1 ,600 X 1 ,200 at 85Hz 

$3,495.95 

(877) 877-2269 
www.blackbox.com 
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logearGCS1758 8-Port ^ 
MiniView Ultra+ 

The MiniView Ultra+ supports up to eight Windows-, Sun 
Solaris-, Mac-, or Linux-based systems, and it supports 
the special keys on Sun and Apple keyboards. The 
GCS1758 casing fits into a 1U, 19-inch rack mount. 



Best for: Enterprises with computers that 
run a variety of OSes and need to be con- 
trolled from a single console. 



• Audio support allows sharing of multimedia speakers 
and microphone 

• Can hot-swap and auto-detect device changes 

• LED display for simple status monitoring 

• Desktop- or rack-mountable 

$359.95 

(866) 9-IOGEAR (946-4327) 
www.iogear.com 



Broadrack DVI-2G8A ^ 

This 8-port DVI switch from Broadrack features 
audio and microphone switching and two USB 
2.0 device hub ports. The DVI ports are TMDS- 
and HDCP-complaint for support of DD32B emu- 
lation and playback of video with digital content 
protection. 

Best For: Enterprises that need to link a number 
of computers that produce high-resolution dis- 
plays and require audio and microphone multime- 
dia connectivity. 



• Audio and mic switching let you use the multi- 
media systems of each computer 

• 2-port USB 2.0 device hub with hotkeys to 
share your USB devices 

• Support for high-definition digital video (1 ,920 x 
1 ,200) and analog video (2,048 x 1 ,536) 

• Firmware upgradable via USB port 

$545 

(714) 444-2390 
www.broadrack.conn 




logearGCS1204 MiniView DVI 

If you're looking for support of high-resolution monitors, 
the GCS1204 is ideal. It handles resolutions up to 3,840 x 
2,400 on up to four PCs, and logear's display emulation 
technology will remember the computer's optimal display 
settings and refresh rate. 

Best for: Environments where high-resolution monitors are 
required, such as computer-aided design, desktop publish- 
ing, and broadcast houses. 

• Two-port USB 2.0 peripheral hub 

• Hotkey switching between KVM focus, USB peripheral, 
and audio ports 

• 2.0 or 2.1 audio 

• Mouse emulation may be disabled to allow program- 
mable buttons to function 

$499.95 

(866) 9-IOGEAR (946-4327) 
www.iogear.com 




OpengearlP-KVM1G01 



This palm-sized, single-port KVM 
device can be used at the rack or 
remotely over IP. Additionally, it offers 
full control of systems during bootup, 
BIOS, and server lockups. 

Best For: Enterprises that need a 1 -port 
KVM over IP device that gives them the 
flexibility to add remote KVM access to 
one server at a time. 



• No client software; secure, encrypted 
browser sessions with authentication 

• USB and PS/2 interfaces 

• Virtual media support 

• Serial port for console access to 
switches, routers, PBXes, or an 
external modem. 

$345 

(888) 346-6853 
www.opengear.com 



logear GCS1716KIT 16-Port MiniView Ultra+ Y 

This 16-port KVM switch features logear's ASIC technology that provides an auto 
sensing function to recognize the position of each station in the installation, so you 
don't need to manually set the position with DIP switches. 

Best For: Enterprises that want to streamline the organization 
of a large, or expanding, server operation. 



• Multiplatform OS support (Windows, Mac, 
Sun Solaris, and Linux) 

• Computer selection via front panel LEDs 

• Two-level password protection for OSD 

• Maximum video resolution of 
2,048 X 1 ,536 

$549.95 

(866) 9-IOGEAR (946-4327) 
www.iogear.com 
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StarTech SV3254DX4I 

CAT 5 Matrix IP KVM Switch Y 

The four-user, 32-port CAT 5 Matrix IP KVM 
switch gives you control of connected servers, 
devices, and services through your local net- • 
work infrastructure. You can reboot the system, • 
access the BIOS, and install applications or 
operating systems. • 



Best for: Enterprise users who need to save 
time and resources by having complete remote 
control over all the equipment on their local 
networks. 



• Simultaneous remote control of any of the 32 
ports by four remote IP users 

• Virtual media support 

• USB 2.0 allows for emulation and remote 
installations of software and operating systems 

• Open-source architecture eliminates "cost 
per port" licensing and ongoing fees 

$4,255.99 

(800) 265-1844 
www.startech.com 






TRENDnet TK-804R 8-Port 
USB KVM Switch 

This rackmount, 8-port KVM switch supports USB and PS/2 
interfaces on the console side and USB on the PC side. 
Users can switch between PCs using hotkeys, push but- 
tons, or the on-screen display for flexible management. 

Best For: IT staff looking for an affordable KVM switch with 
an on-screen display to make it easy to manage multiple PCs. 

• 8-port stackable KVM switch with VGA and USB connec- 
tion to computers 

• Device monitoring with adjustable Auto-Scan, audible 
feedback, and the ability to cascade up to 64 computers 

• Supports most operating systems and advanced mouse 
designs 

$265 

(310) 961-5500 
www.trendnet.com 




TRENDnet TK-RP08 8-Outlet 
Remote Power Controller 

The 8-Outlet Remote Power Controller provides remote 
on/off power control for devices on your network, and it 
works with TRENDnet's TK-IP101 KVM switch to facilitate 
remote power cycling and rebooting. 

Best For: IT staff who need to service and reboot PCs from 
any location. 

• Local power control for eight electrical outlets and up to 
128 cascaded power outlets 

• Save resources by performing power management from 
one computer 

• Feature-rich power controller delivers total load display 
and power module viewing 

• Eight green and red LED indicators display on/off and 
power failure status 

$275 

(310) 961-5500 
www.trendnet.com 



TRENDnet TK-IP101 
1-Port KVM Switch 
Over IP y 



TRENDnet's 1-Port KVM Switch Over IP eliminates the 
need to physically be in the server room to troubleshoot, 
reboot, or edit preboot functions. 

Best For: Data centers looking for cost-effective 
remote server management for multiple users. 



StarTech NOTECONS01 KVM 
To USB Mobile Console Adapter 

Want to turn your notebook into a portable command console? 
StarTech's NOTECONS01 features a VGA and USB port (or PS/2 
with included adapter), and it's powered by the server, so you 
don't need to be next to an AC outlet. 

Best For: Mobile administrators and repair technicians who want 
a troubleshooting tool that requires no additional accessories or 
server-side software installation. 

• Supports up to 1 ,920 x 1 ,600 resolution at 60Hz 

• Instant-on technology ensures the user sees the entire startup 

• Manual video override adjustments let the adapter work with 
legacy and industrial devices 

• Eliminates the need for crash carts in the server room 

$469.99 

(800) 265-1844 
www.startech.com 




• Manage multiple servers from your network or 
remotely from any Internet connection 

• IP-based remote control server management for 
Windows- and Java-based clients 

• An intuitive Web interface provides controls from 
BIOS-level functions to Windows-based applications 

• With up to 16 active user accounts, the TK-IP101 
supports four concurrent logins 

$499 

(310) 961-5500 
www.trendnet.com 




Tripp Lite B02G-008-17-IP8-Port v 
NetDirector Console KVM Switch 

The 8-port NetDirector from Tripp Lite offers a dual-rail configuration 
with a push-in keyboard and fold-down, 17-inch LCD monitor. Additionally, 
the B020-008-17-IP's 1U rackmount design is ideal for environments in 
which space is at a premium. 

Best For: Enterprises that need to maximize space in their server rooms. 

• Dual-slide LCD monitor module can slide independently of the keyboard/touchpad module 

• Dual bus supports one local and one remote user simultaneously accessing the KVM Switch 

• Remotely access computers via the LAN, WAN, or the Internet to control your installation when and where you want 

• Includes an extra HD15 port and two PS/2 ports on the rear of the unit for connection of an external console 

$2,669.99 

(773) 869-1111 
www.tripplite.com 



Tripp Lite BG64-G32-G4-IP 32-Port NetDirector IP KVM Switch Y 



Tripp Lite's 32-port NetDirector IP KVM Switch can be 
used by up to four remote users and one local adminis- 
trator at the same time. The 1 U unit features a full on- 
screen display with multilevel authentication. 

Best For: Enterprises with multiple-level administrations 
that need simultaneous access. 




• Two RJ-45 1 0/1 00/1 000Mbps network ports for 
redundant or dual-IP operation 

• Directly connect up to 32 computers/servers or up to 
256 by cascading a second level of switches 

• Panel array mode lets you view up to 32 ports at the 
same time 

• Remote authentication for RADIUS, LDAP, LDAPS, 
and Active Directory 

$6,000 

(773) 869-1111 
www.tripplite.com 
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Processor Showcase 

The Processor Showcase provides a 
quick glimpse of data center products 
available from some of the industry's 
leading manufacturers. Each Showcase 
provides information on the product's 
most important features, complete with 
a product photo, to simplify your 
buying process. 



Product manufacturers and resellers: 

To list your products, call (800) 247-4880. 



Physical Infrastructure 



Climate & Power Monitoring Book 



Server Room 
Climate & Power 
Monitoring 



it 



How to Protect Computer Equipment 
Agmnst Damage & Downtime Using 
Lonif-cost, Web-based Devices. 




Server Room Climate 

Worries? 
GET OUR FREE BOOK 

• Read about the 
$150,000 thermostat 

• Useful information to 
protect your server room 

• Monitoring techniques 

• Heat: the big problem 

• Water and unwanted 
visitors 

• Where to place your 
sensors 

• Things to avoid 
freebook@itwatchdogs. com 



IT Watchdogs 

(512) 257-1462 ext 537 
www. ITWatchdogs.com 



Physical Infrastructure 



Switched CDU CW-24V2 




Server Technology, Inc. 



Power cycle individual or 
groups of outlets to remotely 
reboot network devices. 

• 208V to 240V Single or 3- 
Phase power at 20 or 30A 

• Access and Security: Web 
interface, SSL, SSH, Telnet, 
SNMP, LDAP, TACACS+, 
and RS-232 access 

• Environmental Monitoring 

• Fuse Retractor 

• High-Density 24 IECC1 3 



Server Technology Inc. 

(800) 835-1515 
www . se rve rtech . co m 



Physical Infrastructure 




MicroGoose Climate Monitor 

Low-Cost MicroGoose Climate Monitor with PoE 

• $199 — Low-cost Web server 

• Small, fits anywhere 

• Temperature & Humidity Sensor built-in 

• Power over Ethernet (PoE) 

• Multiple alarms per sensor 

• 1 -Year Warranty/30-Day Money Back Guarantee 




IT Watchdogs 

(512) 257-1462 ext 537 
www.ITWatchdogs.com 



Physical Infrastructure 



CS-3AVY Sentry Smart CDU 

/Provides reliable 3-Phase 
power distribution. Multiple out- 
let types distribute multiple volt- 
ages via 3-Phase 208V Wye 
power in-feed. 



Server TechnoEosYjr Inc. 



• High Density 

• Multiple Voltage Outputs 

• Input Current Monitor 

• IP Access & Security 

• SNMP Traps 

• Environmental (Temperature 
& Humidity) Monitoring 

• Branch Circuit Protection 

• NEW! Linking for Smart 
CDU (Expansion Modules) 



Server Technology Inc. 

(800) 835-1515 
www . se rve rtech . com 



Physical Infrastructure 



Snake Tray® Cable Management 
& Power Distribution 

Designed To Reduce Construction Costs! 



Cable Management 

Built-in mounting hardware 
Integrates with access 
floor or mounts directly to 
the subfloor 

Power Distribution 

Modular energy-efficient 
bus bar technology 
Power and data 
distribution boxes 



Snake Tray 

(800) 308-6788 
www.snaketray.com 





Physical Infrastructure 



CS-27V Sentry Smart CDU 

Provides reliable power distri- 
bution. Use one IP address 
across different power circuits. 

• High Density 

• Multiple Voltage Outputs 

• Input Current Monitoring 

• IP Access & Security 

• Alerts for Power & 
Environmental Conditions 

• NEW! Fuse Retractors for 
Branch Circuit Protection 

• Environmental (Temperature 
& Humidity) Monitoring 

• NEW! Linking for Smart 
CDU (Expansion Modules) 



m 

Server TechnolosYjr Inc. 



Server Technology Inc. 

(800) 835-1515 
www . se rve rtec h . com 



Physical Infrastructure 



UCoustic™ Sound Proof Enclosures 



The way a cabinet 
should sound. 

28.DBa 
Sound Reduction 

24U & 42U dissipates 
7.2kW of heat as well 
as up to 28.DBa sound 
reduction 

Reduces equipment 
noise to whisper level 
Universal square mounting 
holes 



Rackmount Solutions Ltd. 

(866) 207-6631 
www.rackmountsolutions.net 




RACKMOUNT 

SOLUTIONS, LTD 

ISO 9001:2000 Certified 



Physical Infrastructure 



RS-4 Post Rack 



RACKMOUNT 

SOLUTIONS, LTD 

ISO 9001:2000 Certified 



Unique adjustable 4- 
post rack 

Includes FREE angle 
brackets 

Bottom adjustable plates 
serve as shelf for towers 
or UPS 

Adjusts from 21. 2 to 35 
inches deep 
Square, universal 
mounting holes 



Rackmount Solutions Ltd. 

(866) 207-6631 
www.rackmountsolutions.net 



Physical Infrastructure 




Cisco ASA5505 19" Racl( Mount Kit 

Custom Designed Rack Mount for the Cisco ASA5505 

• Fits into a 1 .25U space 

• Power supply is securely fastened to the mount 

• Keep your rack tidy and neat! 

More rack mount kits available at 
www.cablesandkits.com 



cablesANDkits 

THE NETWORK ACCESSORY SUPERSTORE 



cablesANDkits.com 

(888) 622-0223 
www.cablesandkits.com 



Physical Infrastructure 



NETWORK Series Networl( Rack 



Prices starting at 

$1,042 




RACKMOUNT 

SOLUTIONS, LTD 

ISO 9001:2000 Certified 



• Need a COMM rack with the 
rack rails moved to one side 
to accommodate large cable 
bundles? 

• You have the option to slide 
your vertical rack rails hori- 
zontally as well as vertically. 
Set your rackmount width to 
19 or 23 inches. Talk about 
versatility! 

• Slide the rack rails to one 
side of the cabinet, allowing 
for additional 4 to 9 inches, of 
space on the opposite side to 
run large cable bundles. 



Rackmount Solutions Ltd. 

(866) 207-6631 
www.rackmountsolutions.net 



Reduce your energy consumption now. 

Get Power IQ™ energy management software free. 

Power IQ: 

► Works with Raritan, APC®, Geist and 
Server Technology® PDUs 

► Provides accurate IT device, outlet 
group, rack, branch circuit and data 
center-level energy monitoring 
and reporting 

► Rennotely powers outlets on and off 

► Sinnplifies rack PDU configuration 
managennent 

► Generates powerful analytics 
in minutes 

► Helps increase energy efficiency now 



Your data center has a lot to say. Get the tool that can help you listen. 
Visit www.raritan.com/freepoweriq and download Power IQ now. 




^Raritan. 

Know more. Manage smarter.™ 



Raritan Inc. 
800.724.8090 

www.raritan.com/freepoweriq 



Page 14 



Processor.com 



July 31,2009 



I PRODUCT RELEASES~| 



Do you 
have a new 
product 

that data center/IT 
managers would 

be interested 
in learning about 



7 



Send your press release or 
related product information 
to press@processor.com. 



Clients 




I AMD Six-Core AMD Opteron HE 

AMD announced the lat- 
est members of the six-core 
AMD Operton processor 
family. Designed to deliver 
power efficiency and in- 
creased performance for 
cloud computing and Web-serving en- 
vironments, the 55W six-core AMD 
Operton HE processors come in 2P, 4P, 
and 8P systems and are available in HP 
ProLiant G6 servers. The Opteron HE 
series provides improvements of up to 
18% in both performance per watt and 
platform power consumption, according 
to AMD. The 2P, 4P, and BP chips in the 
energy-efficient HE series are joined by 
high-performance 2.8GHz processors in 
AMD's six-core Opteron SE series, which 
AMD is also unveiling. 

■ Honeywell Dolphin 6100 

Honeywell launched the Dolphin 6100 
mobile computer, which is ideally suited to 
retail and light industrial scanning tasks. 
The Dolphin 6100 features a compact and 
lightweight form factor, advanced wireless 
performance, price and product look-up, a 
long-lasting battery, a 28-key shifted 
alphanumeric keypad, and precisely posi- 
tioned scan-keys. Z-Space Technologies 
also offers its Ready-To-Go Applications 
and Inventory Management and Asset 
Tracking Solution Pack products for the 
Dolphin 6100. Additionally, the Honeywell 
Dolphin 6100 features built-in Adaptus 
Imaging Technology. 

■ HP XW9400 Workstation With Six-Core 
AMD Opteron 2400 Series Processors 

HP introduced the latest version of its 
HP xw9400 Workstation, which supports 
the six-core AMD Opteron 2400 Series 
processor. The workstation is designed for 
multithreaded applications, multitasking, 
and mega-tasking in the engineering, 3D 
digital content creation, oil and gas, and 
scientific research industries. It also sup- 
ports up to two six-core AMD Opteron 
processors, AMD HyperTransport 3.0 
technology, an optional ATI FirePro 
V7750 3D workstation graphics accelera- 
tor, and an ultra-efficient 80 PLUS power 
supply. The HP xw9400 Workstation 
starts at $1,899. 

■ Intermec Mobile Printers 

Intermec released three ruggedized 
mobile printers to its PB product family. 



the PB21, PB31, and PB51. The printer set 
features twice as much memory as com- 
petitors and the ability to print 20 to 30% 
faster, and they are the industry's only 
"smart" rugged mobile receipt and invoice 
printers, Intermec says. The printers also 
feature a wide temperature range, humidity 
and IP54 seal ratings, 6-and-a-half-foot 
drop specification, and a 50g shock rating. 
The printers will be available in North 
America in the third quarter. 

■ Kyocera Mita TASKalfa 220 & 180 

Kyocera Mita released the TASKalfa 220 
(22ppm) and TASKalfa 180 (18ppm), two 
multifunction devices that print in black 
and white. Kyocera says the printers are 
best suited for small-business settings and 
for individual users. Both models offer a 
300-sheet paper drawer and 100-sheet mul- 
tipurpose tray. Additionally, both models 
offer an optional 50-sheet document 
processor and optional print feature that 
uses a host-based GDI (graphical device 
interface) for Windows based on a 
150MHz FlexRISC processor and 32MB of 
memory. The TASKalfa 220 is priced at 
$1,895, while the 180 is $1,695. 

■ Lexmark All-ln-One Inkjets 

Lexmark announced a family of eight all- 
in-one Inkjet printers. Ideal for SMEs, the 
three different models range in price from 
$199 to $399 and feature 4.3-inch touch- 
screens providing access to Internet-based 
features, such as corporate and informa- 
tional RSS feeds. In Lexmark's myTouch 
with Smarts olutions technology, users can 
utilize a GUI with widget-like applications 
to speed up common tasks. Other features 
include Wi-Fi (including 802.1 In), one- 
sheet ID card copying, automatic contact 
list updating through business card scans, 
and an Eco Mode that by default uses both 
sides of paper sheets. 

■ Microsoft CRM Accelerators 
For Microsoft Dynamics CRM 

Microsoft launched three CRM Accel- 
erators for Microsoft Dynamics CRM 
designed to bring additional capabilities 
to the platform. The Social Networking 
Accelerator lets business professionals 
monitor and analyze customers' conver- 
sations on social networking sites. 
The Partner Relationship Management 
Accelerator enables organizations to dis- 
tribute sales leads and manage sales 
opportunities via Microsoft Dynamics 
CRM. The Portal Integration Accelerator 
links Microsoft Dynamics CRM to an 
organization's Web experience, effective- 
ly reducing business interaction costs. 
The accelerators are free to Microsoft 
Dynamics CRM customers and partners. 

■ OKI Printing Solutions Total Managed Print 

OKI Printing Solutions announced its 
MPS (managed print services) product. 
Total Managed Print. Total Managed Print 
offers a comprehensive set of tools, pro- 
grams, and infrastructure for dealers and 
solution providers designed for new enter- 
prises or those with an MPS model already 
in place. The first service to be released is 
PageStart, a turnkey program designed to 
provide the fastest way for partners to enter 
MPS. Upcoming components of Total 
Managed Print include FleetAssist and 
FullAccess, which will be released later 
this year. 

■ Omega Legal Systems & dtSearch 
Partnership 

Omega Legal Systems and dtSearch have 
incorporated the dtSearch Engine into 
Omega Legal to improve scalability 
throughout large volumes of information. 
dtSearch lets customers index more than a 
terabyte of data in just one index and build 



an unlimited amount of indexes. More than 
24 search options are offered, including 
Unicode support, which encompasses hun- 
dreds of international languages. A spider 
is built into the program to allow for local 
and remote searching capabilities and pub- 
lic and secure Web data and dynamic and 
static Web data, with WYSIWYG hit-high- 
lighted displays. 

■ Oracle SQL Developer Data Modeler 

Oracle released the Oracle SQL Devel- 
oper Data Modeler to help developers 
design data models for Oracle Database. 
The modeler supports multidimensional 
data to create entity relationship diagrams. 
It also offers visual entity relationship mod- 
eling and single relational models for data- 
bases such as Oracle Database; IBM DB2 
V7 and V8 for Linux, Unix, Windows, and 
OS/390 mainframes; and Microsoft SQL 
Server 2000 and 2005. The Oracle SQL 
Developer Data Modeler integrates with 
Oracle SQL Developer for querying and 
writing repository reports. 

■ Raritan Power 10 

Raritan announced enhancements to 
Power IQ, its data center energy manage- 
ment software. The software is designed to 
help companies better track and analyze 
energy usage down to the individual IT 
device level and implement energy-saving 
actions from a central power console to 
anywhere in the enterprise. Enhancements 
include the ability to collect energy data 
from and provide remote power control 
of Ethernet-enabled rack PDUs from 
companies such as APC, Avocent, Cyber 
Switching, Geist, HP, MRV, and Server 
Technology. Other features include increas- 
ing a server room's ambient temperature 
gradually, creating energy cost bill-back 
reports to drive behavior, forecasting 
potential energy savings before decommis- 
sioning servers, and scheduling power 
usage at optimal times to qualify for energy 
rebates. 

■ Sybase 10 15.1 

Sybase announced IQ 15.1, the latest ver- 
sion of its column-based analytics server 
that includes in-database business analytics. 
Sybase IQ 15.1 is designed to deliver a fast, 
accurate analysis to address the growing 
need to anticipate risks and opportunity in a 
volatile global climate. Feature functionali- 
ties in Sybase IQ 15.1 include tools for 
driving risk management, fraud detection, 
business process management, and invest- 
ment management strategies. By running 
real-time predictive analytics, users can 
also increase speed and accuracy. Version 
15.1 in-database analytics removes the bar- 
riers for enterprises and governmental 
agencies to perform critical drill-downs and 
predictive analysis. Sybase IQ 15.1 sup- 
ports hundreds of statistical and data min- 
ing functions, executed completely in-data- 
base and supporting hundreds of concurrent 
users. 



Messaging & Telephony 



■ Nortel CS1000 6.0 

Nortel announced the CS 1000 (Com- 
munication Server 1000) 6.0 for enterprise 
communications and telephony-based uni- 
fied communications. Enhanced features 
include centralized functions for cost 
reduction, high-density services gate- 
way, more COTS platform options for IBM 
x3350 and Dell R300. The CS 1000 com- 
bines a converged network, advanced 
applications, and telephony features to pro- 
duce an entirely unified communications 
solution. It also supports unified messag- 
ing, customer contact center, interactive 
voice response, wireless VoIP, and SIP/IP 
telephony. 



■ TeamLogic IT Email Archiving 

TeamLogic IT launched Email Archiving, 
a service that's designed to provide small 
to medium-sized enterprises with secure and 
cost-effective email management. Email 
Archiving, a service powered by Live- 
Office, helps companies reduce email stor- 
age costs, meet compliance requirements, 
and quickly respond to legal requests. The 
SaaS is a fully managed and Web-based 
solution to simplify mailbox management, 
shrink storage costs, reduce backup win- 
dows, protect critical business informa 
tion and intellectual property, accelerate le- 
gal discovery, and help enforce corporate 
email policies. TeamLogic IT takes 
a full-service approach to help organiza- 
tions address email-related operational 
issues. 



Networking & VPN 



■ EMC lonix 

EMC announced EMC lonix, IT man- 
agement software designed to accelerate 
migration from physical IT to virtual IT to 
cloud infrastructures. By combining auto- 
mated server compliance and configura- 
tion solutions with a unified management 
software portfolio, lonix is designed to 
offer insight into and control over physi- 
cal and virtual IT infrastructures. lonix 
provides tools in four categories, includ- 
ing service discovery and mapping, IT 
operations intelligence, automation and 
compliance, and service management. 
Additionally, the EMC RMSG (Resource 
Management Software Group) now bears 
the name EMC lonix. 

■ Marathon Technologies XenApp 
High Availability Tool Kit 

Marathon Technologies launched a group 
of planning and implementation tools that 
will help companies ensure high availabili- 
ty of applications delivered with Citrix 
XenApp in a way that is more efficient and 
cost-effective. The XenApp High Avail- 
ability Tool Kit includes white papers and 
blueprints for better strategies based on the 
idea of adapting the levels of availability to 
the environment and application silos using 
Marathon everRun automated high- avail- 
ability software. The Tool Kit includes 
the Optimizing Citrix XenApp High 
Availability white paper, the XenApp 5.0 
High Availability Performance white paper, 
the XenApp 5.0 Deployment Blueprint, and 
the Virtualize and Fortify XenApp for 
Lower Costs & Higher Software Level 
Agreements Webinar. 

■ Napatech NT4E & NT4E-STD 

Napatech announced new in-line adapt- 
ers, the NT4E and NT4E-STD, designed 
to support IGbps networks. These in-line 
adapters offer complete line-rate through- 
put at IGbps with no packet loss, regard- 
less of the size of the packet. This lets 
network appliance vendors cre-ate high- 
performance products based on cost- 
effective standard server platforms. 
Additionally, the NT4E in-line adapter 
includes protocol and flow recognition, 
filtering, and intelligent distribution of 
traffic processing on up to 32 CPU cores. 
The NT4E in-line and NT4E-STD in-line 
adapters are ideal for OEM network appli- 
ance vendors in the network performance 
monitoring, network test and measure- 
ment, network security, and network opti- 
mization markets. 

■ Overland REO 

Business Continuity Appliance 

Overland announced the REO Business 
Continuity Appliance for small to medium- 
sized enterprises to streamline mission-crit- 
ical applications on both physical and 
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virtual environments. REO Business 
Continuity Appliance features include inte- 
gration with Windows/Linux file services, 
Microsoft Exchange, SQL, VMware, and 
Hyper- V; nondisruptive server, application, 
and data migration; server, storage, and 
network hardware independence; and an 
environmental profiler for analyzing 
resource utilization. The REO Business 
Continuity Appliance starts at $24,000. 

■ Wyse Technology 
Virtual Desktop Accelerator 

Wyse Technology launched its VDA 
(Virtual Desktop Accelerator), which is 
designed to address the limitations of exist- 
ing data centers that suffer from network 
latency, packet loss, and other inefficiencies 
caused by long proximity. Wyse VDA 
accelerates network protocols to enhance 
remote end-user productivity and experience 
in virtualized settings. Wyse VDA will 
accelerate popular virtualization architec- 
tures such as Citrix XenApp, Citrix 
XenDesktop, VMware View, and Mi-crosoft 
Terminal Services. By reducing the geo- 
graphic redundancies required to cover end 
users, Wyse VDA will also contribute to 
reductions in greenhouse gases. With Wyse 
VDA, if data centers are in a disaster situa- 
tion, the enterprise can easily connect the 
affected end users into alternate data centers 
without compromising their experience. 



Physical Infrastructure 



■ Adder AV4PR0-DVI 

Adder released the AV4PR0-DVI, a 
professional-grade KVMA (keyboard, 
video, mouse, and audio) switch that 
enables users to share a high-resolution 
display and USB peripherals among multi- 
ple computers. AV4PR0-DVI includes 
USB True Emulation technology, which 
means the exact characters of the keyboard 
and mouse are continuously emulated to 
the computers. Ideal for use with special- 
ized interface devices, such as graphics 
tablets, 3D explorers, and joysticks, the 
KVMA switch is suited for users in archi- 
tecture, graphic design, post production, 
and animation. The four-port AV4PR0- 
DVI also offers a flexible, independent 
switching mode that lets you use the video, 
keyboard, or mouse functionality from one 
computer while taking the audio from 
another system. 

■ Chloride North America Agility Series 

Chloride North America released five 
UPS models under the Agility Series prod- 
uct hne that range from 750 to 3,000kVA 
models in a standardized 2U chassis plat- 
form, which the company says increases 
rack space for mission-critical equipment. 
The Agility line is engineered for servers, 
large peripherals, storage systems, and 




other networking equipment. Chloride says. 
It also includes two-tiered Buck & Boost 
technology that protects against sags and 
surges from incoming power. Further, the 
five models include built-in communica- 
tion-line protection that guards phone or 
network connections, such as faxes. 



modems, and DSL. The series' models 
include scalable batteries, dual-bank load 
shedding, RS-232, USB, RJ-45 Ethernet, 
andRJ-11 REPO inputs. 

■ Eaton Intelligent Power Manager 

Eaton announced Intelligent Power 
Manager, which will help IT managers and 
administrators remotely manage and moni- 
tor all of their networked power and envi- 
ronmental devices across the enterprise. 
Intelligent Power Manager can carry out a 
scan for all the UPS systems using both 
XML Web services and SNMP. It can dis- 
cover and manage other components such 
as ePDU products, environmental sensors, 
and shutdown modules to give administra- 
tors comprehensive control of their protect- 
ed infrastructure. 

■ Eaton NetWatch 5.0 & Network Shutdown 
Module 3.20 

Eaton announced it will provide protec- 
tion software that is fully tested and com- 
patible with VMware' s new ESXi 4.0 virtu- 
alization software. Eaton's NetWatch 5.0 
and Network Shutdown Module 3.20 let 
virtual machines and host servers connect- 
ed to an Eaton uninterruptible power sup- 
ply be safely shut down when necessary. 
This guards the data integrity on the com- 
puter or server being shut down. In the 
event of an extended power outage, Eaton's 
software shuts down numerous virtual 
machines sequentially. 

■ Emerson Network Power Liebert NXL UPS 

Emerson Network Power announced it 
increased the capacity of its Liebert NXL 
UPS system to 750kVA and enabled the 
company's Alber BDSi monitoring utility 
to be optionally added into the matching 
Liebert NXL battery cabinet. The Liebert 
NXL is designed for medium-sized and 
large data centers starting at 250kVA 
capacities. Available in single- and multi- 
ple-module systems, the 750kVA model 
aims to optimize efficient power manage- 
ment abilities and increase uptime in data 
centers, the company says. Compatible 
ancillary products that the company says 
will enhance system flexibility and avail- 
ability include a maintenance bypass cabi- 
net, module battery disconnect, system 
control cabinet, and matching battery cabi- 
net. The Alber BDSi battery-monitoring 
utility lets users optimize and extend bat- 
tery life, reduce maintenance costs, and 
improve safety through the proactive man- 
agement of system batteries. 

■ Future Facilities GSigmaDC Release 5 

Future Facilities released 6SigmaDC 
Release 5, the latest addition to its data cen- 
ter design and operations software suite. 
This release is designed to extend the tool's 
modeling capabilities to include cooling 
designs. 6SigmaDC uses 3D modeling on 
everything from equipment design to data 
center design and includes load capacity 
planning throughout the life cycle of the 
modeled components. Other new software 
components include 6SigmaRoom, 6Sigma- 
Rack, and 6SigmaFM. 

■ Server Technology CS-27VY 

Server Technology announced the CS- 
27VY mixed-outlet CDU (cabinet power 
distribution unit) with six NEMA 5-20R 
120V outlets and 21 lEC C13 208V outlets. 
The CS-27VY is designed to deliver 
lO.SkW of power to the rack and provide 
reliable power distribution combined with 
local and network power monitoring as 
well as environmental monitoring via IP. 
Other features include delivering multiple 
output voltages to the rack, support for both 
120V- and 208V-powered devices, and net- 
work monitoring of the CDU using either 
the serial interface, internal Web interface. 



or the SPM (Sentry Power Manager) Soft- 
ware System. 

■ Telect High-Density Patching Products 

Telect announced high-density patching 
products for telecommunication data cen- 
ters, Ethernet-based central offices, and 
high-capacity network applications based 
on CAT 5e or CAT 6. The company's 
easy-to-deploy batch bays are fully con- 
figured and include cable management 
built into the bay's footprint. Configura- 
tions include 480 terminations that come 
in a standard 7-foot rack. Single-bay, half- 
bay, and multiple-bay systems are avail- 
able standard, and other configuration 
types are available upon request. Various 
features include integrated cable manage- 
ment routes, patch panels with integrated 
tracer LEDs, and individual CAT 5e and 
CAT 6 panels available for low-capacity 
apps. 



Security 



■ Check Point Software Technologies 
SmartWorkflow 

Check Point Software Technologies un- 
veiled SmartWorkflow, its security man- 
agement software blade for infrastructure 
extension and increased functionality. 
Features include automated processing of 
tracking, managing auditing policy 
changes, redu-cing configuration errors, 
and increased network security integrity. 
To guarantee the consistency of company 
policy, SmartWorkflow creates a session 
flow so step-by-step protocol is easy to 
follow. Reports reflect the creation, work, 
review, submission, and approval of each 
session. IT customers can select the soft- 
ware blades of their choice and combine 
them into a single management gateway 
to minimize costs. 

■ CoSoSys My Endpoint Protector 
For Mac OS X 

CoSoSys announced a version of its My 
Endpoint Protector for Mac OS X. My 
Endpoint Protector offers the ability to 
proactively manage device control use and 
prevent data theft, data loss, and data leakage. 




cososvs 

Features include the ability to monitor, con- 
trol, or block the use of portable USB and 
Fire Wire devices and CDs/DVDs; centrally 
manage all protected Macs and PCs online; 
grant granular permissions to specific USB 
storage devices; save time by requiring no 
server installation; and enforce offline pro- 
tection when computers are not connected 
to the Internet. 

■ Elcomsoft Wireless Security Auditor 

This $1,199 software from Elcomsoft is 
intended to test the security of the WPA or 
WPA2-PSK passphrases used in corporate 
wireless networks. It does this by trying to 
guess the passwords — up to tens of thou- 
sands per second — via configurable meth- 
ods from the inside or the outside of the 
WLAN. Wireless Security Au-ditor can 
harness the parallel processing power of 
certain Nvidia and ATI video cards to radi- 
cally accelerate the process. 

■ Incentra Secure Replication Service 

Incentra unveiled a Secure Replication 
Service, which is delivered with EMC 
Avamar. It is designed to automate the off- 
site replication of customer backup data in 
order to improve disaster recovery capabili- 
ties. EMC Avamar delivers disk-based data 
defense, and the Secure Replication Service 



from Incentra provides a solution to the up- 
front cost and ongoing operational issues 
that come with offsite data security. 
Designed on Dell and EMC technology. 
Secure Replication infrastructures are kept 
in FORTRUST's SAS 70 Type II facility, 
which is monitored all hours of every day 
by the Incentra Network Operations Center 
in Colorado. 

■ NCP Engineering GmbH NCP Secure 
Enterprise Management System 

NCP Engineering GmbH introduced 
NCP Secure Enterprise Management 
System for Linux-based systems. NCP 
Secure Enterprise Management System is 
designed to simplify powerful hybrid 
IPsec/SSL networks with plug-and-play 
capabilities on any network infrastructure. 
It can also stand alone to work as a new 
component. One administrator is given 
complete control over thousands of pro- 
tected connections, policy setting and 
enforcement, client updates, configura- 
tions, and many other NAC management 
activities from one dashboard interface. 
The NCP SEM System gives diverse 
administrative entrance and activity log 
viewing for easy management to cus- 
tomers running several VPNs needing 
individual settings. 

■ SMobile Systems Security Shield, 
Anti-Theft & Identity Protection Update 

SMobile Systems released a solution for 
recently launched malicious code disguised 
as an update for BlackBerry users on the 
Etisalat network in the United Arab 
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Emirates. In addition to the spy ware inter- 
cepting users' email, the bogus update also 
quickly drains device battery life. Pushed 
as an update as a WAP message, the Java 
file-based spy ware ultimately sends users' 
messages to a server. BlackBerry and other 
smartphone users can use SMobile Security 
Shield or Anti-Theft and Identity Protection 
to remove the spy ware. Existing SMobile 
users need only to apply the update. 

■ Steel Eye Protection Suite 7 
For Windows Server 

SteelEye released Protection Suite 7 for 
Windows Server, which integrates continu- 
ous, real-time synchronous and asynchro- 
nous data-replication and high-availability 
clustering software from the company's 
DataKeeper and LifeKeeper lines. In addi- 
tion to the suite's support for a wide range 
of server and storage configurations, the 
suite also includes an easy-to-install and 
easy-to-manage automated disaster recov- 
ery environment. Further, the suite includes 
integrated WAN optimization with nine 
compression levels to help companies effi- 
ciently use bandwidth via LAN and WAN 
replication. Features include automatic 
failover; any-point-in-time application 
recovery; controlled switchover abilities; 
and the inclusion of LifeKeeper Extender 
to let users, OEMs, and ISVs create cus- 
tomized application recovery kits to protect 
any application. 

■ Symark PowerSeries Management 
Console 1.0 

Symark launched the PSMC (Power- 
Series Management Console) 1.0, a unify- 
ing platform the company says is central to 
Go to Page 16 
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Continued from Page 15 
enabling automated privilege access lifecy- 
cle management in heterogeneous IT set- 
tings. Symark says the console, which inte- 
grates with the company's PowerBroker 
6.0, allows for automated workflows for 
privileged policy creation and approval as 
well as automated policy propagation in 
large-scale deployments, helping companies 
gain security and compliance while also 
making it easier to manage large privileged 
management deployments. Key features 
include eWorkflow, which provides auto- 
mated configurable workflows; a graphical 
policy editor for PowerBroker users who 
have limited Unix experience; automated 
policy propagation for automatically 
updating policy changes across multi- 
ple PowerBroker 6.0 installations; and 
centralized logging, which enables time- 
serialized log aggregation across multiple 
PowerBroker 6.0 installations. 

■ Trend Micro Core Protection 
For Virtual l\/lachines 

Trend Micro introduced Core Protection 
For Virtual Machines, a virtualization secu- 
rity tool for content security in VMware 
ESX/ESXi environments. Trend Micro Core 
Protection for Virtual Machines is designed 
to secure VMware virtual machines, both 
active and dormant. It uses the VMsafe APIs 
from VMware to offer layered protection 
through the use of dedicated scanning VMs 
coordinated with real-time agents within the 
VM. The service is optimized for virtualiza- 
tion, and it improves the performance profile 
of virtual servers. Trend Micro provides 
malware protection by ensuring that virtual 
machines are secure, including against dis- 
ruptive actions by providing a layer of isola- 
tion for the security agent by the machine 
being scanned. 



Servers 



■ Shavlik Technologies Shavlik NetChk 
Protect 7 

Shavlik Technologies launched Shavlik 
NetChk Protect 7, a patch management pro- 
gram that provides users with one Agent 
for patch management and antivirus and 
antispyware. Designed to cut down on the 
management and overhead needed, Shavlik 
NetChk Protect 7 deploys and maintains 
several agents for these important IT func- 
tions. Additionally, it tackles problems 
related to existing commoditized antivirus 
programs that are slow and outdated. No 
additional charge will be added for Shavlik 
NetChk Protect 7 for existing customers. 



Services 



■ Network Services Plus 
Microsoft Hosted Solutions 

Network Services Plus announced that it 
added Microsoft CRM to its suite of Mi- 
crosoft Hosted Solutions. The hosted or 
cloud-based software services offer cus- 
tomers an alternative to managing applica- 
tions on their own servers in their own envi- 
ronment. Microsoft Hosted Solutions already 
available from Network Services Plus 
include Microsoft Communication Services, 
including Outlook Services for email and 
Windows SharePoint Services for collabora- 
tion, and Office Communication Services for 
faster company communications for office 
and mobile employees. Customers can also 
choose the entire Hosted Business Produc- 
tivity Suite, which includes Microsoft Out- 
look, Microsoft SharePoint, Microsoft In- 
stant Messaging, and Microsoft Office Live 
Meeting. 

■ Sherpa Software Product, Messaging 
& Consulting Professional Services 

Sherpa Software announced a suite of 
services designed to assist customers with 



the evaluation and implementation of 
Sherpa' s software. Services include helping 
enterprises address email archiving, e-dis- 
covery, PST management, and compliance 
requirements for Lotus Notes and Mi- 
crosoft Exchange environments to help 
them maximize their investments in prod- 
ucts and reduce the time and cost of 
email management. Other areas in which 
Sherpa' s specialists can assist customers 
include proof of concepts, product installa- 
tion and configuration, customized onsite 
training, email migration services, compa- 
ny policy implementations for email man- 
agement, and compliance with discovery 
requests. 



Storage 



■ Acronis Backup & Recovery 10 

Acronis announced Acronis Backup & 
Recovery 10, which has been redesigned 
and enhanced to meet the needs of organi- 
zations of all sizes by offering increased 
scalability, backup efficiency, and en- 
hanced operations manageability. It's based 
on the Acronis disk imaging and bare- 
metal restore technology and is capable of 




backing up and restoring any Microsoft or 
Linux-based servers or workstations to the 
full operating state prior to failure. Organ- 
izations can automate backup and disaster 
recovery processes across physical and vir- 
tual environments, including physical to 
virtual migration capabilities in a single 
operation. Acronis Backup & Recovery 10 
offers centralized, policy-based manage- 
ment for distributed IT systems and infra- 
structures. Enterprises can cut both storage 
and network costs with optionally integrat- 
ed s/w deduplication. 

■ Adaptec RAID 5445Z, 5805Z, 5405Z 

Adaptec announced RAID controller cards 
in which the cache dumps to flash. The 
Series 5Z cards eschew the traditional bat- 
tery-based cache backup in favor of Zero- 
Maintenance Cache Protection, a flash mem- 
ory backup device. Because the flash doesn't 
require conditioning and regular replacement 
over the years as batteries do, 5Z cards may 
ultimately prove more reliable and cost- 
effective. The SAS and SATA controller 
family includes the Adaptec RAID 5405Z 
(four internal ports, $785), 5805Z (eight 
internal ports, $965), and 5445Z (four inter- 
nal/four external ports, $1,045). 

■ Alfresco & Caringo Alfresco2CAStor 

Caringo and Alfresco Software have 
partnered to release the Alfresco2CAStor 
connector available on Alfresco Forge. To 
provide seamless content storage, CAStor 
utilizes archiving elements to guarantee 
reliable retention and compliance integri- 
ty. The XeniT interface archive supports 
high-speed import programs and docu- 
ment assigning for metadata and access 
rights. The CAStor storage software solu- 
tion is available as a free download for up 
to 4TB. 

■ Bacula Systems SA Enterprise Edition 2.6 

Bacula Systems SA released Bacula 
Enterprise Edition 2.6, an open-source 
enterprise-class scalable network backup 



alternative to proprietary applications. 
Enterprise Edition 2.6 combines the 
Bacula open-source backup and restore 
platform with administration and manage- 
ment tools to create a single integrated, 
tested, and certified platform. Benefits 
include enhanced production support sub- 
scriptions that include everything needed 
to deploy and host Bacula Systems backup 
and restore technologies. Bacula Enter- 
prise Edition 2.6 can back up to LTO-3 
tape drives at 150MBps, and it can back 
up to disk, tape, and robotic media 
libraries. It features a modular and multi- 
threaded design and delivers high avail- 
ability in a clustered environment. 
Enterprise Edition is issued under the GPL 
open-source license. 

■ Barracuda Networks 
Barracuda Backup Service 

Barracuda Networks announced that the 
latest version of the Barracuda Backup 
Service and Barracuda Backup Agent let 
users employ on-appliance and agent-based 
data deduplication capabilities. The offer- 
ing is capable of reducing backup windows 
and bandwidth requirements compared to 
traditional backup or snapshot technolo- 
gies. The Barracuda Backup Service fea- 
tures support for onsite and offsite backup 
and storage, targets only the data that is 
new or has changed, and can reduce the 
storage footprint of data added to the back- 
up archive. 

■ Barracuda Networks BarracudaWare 
Yosemite Server Backup 8.8 

Barracuda Networks unveiled the latest 
version of its BarracudaWare Yosemite 
Server Backup, which is designed to satisfy 
an organization's data protection needs right 
out of the box. The BarracudaWare Yo- 
semite Server Backup 8.8 features cross- 
platform support for Windows, Linux, and 
NetWare; agents for Microsoft Exchange, 
Microsoft SQL Server, and more; bare-metal 
restore from backups; and alerting of backup 
completion or errors. Barracuda Networks 
also announced a pricing structure that has 
offerings starting at $299 for single server 
up to $1,499 for unlimited usage. 

■ BlueArc l\/lercury 

BlueArc released BlueArc Mercury, a 
network storage platform designed for the 
midrange market. BlueArc Mercury address- 
es storage inefficiencies such as storage 
silos, filer sprawl, and poor utilization rates 
and lagging performance by allowing com- 
panies to consolidate users, applications. 
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and storage systems. Mercury utilizes Blue- 
Arc 's SiliconFS file system, the central 
engine that manages all of Mercury's data 
movement, and includes Intelligent Tiered 
Storage, composed of BlueArc Data Mi- 
gration and Dynamic Read Caching capa- 
bilities. 

■ Bocada Enterprise 5.4 

Bocada announced version 5.4 of its 
Enterprise backup and data protection prod- 
uct. New features include greater visibility 
into backup policy configuration and more 
effective delivery of data protection ser- 
vices. Users can 
lower adminis- 
trative costs and 
drive backup suc- 
cess with the new Policy and Client config- 
uration reporting tool. Other new features 
include improved recoverability, successful 
delivery of SLAs, reduction of excess 
capacity use, and improved customer com- 
munication. 
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■ Bus-Tech l\/lainframe Data Library 

Bus-Tech introduced the MDL-IOOS 
(Mainframe Data Library) for VTL (Virtual 
Tape Library) mainframe system function- 
ality, self-contained storage, and storage 
protection selections. The MDL-IOOS fea- 
tures 4.5TB of RAID disk storage, data 
security, and the Virtuent software engine 
technology. Specifically, Bus-Tech's 
Virulent Replicator offers asynchronous 
replication through IP featuring the IBM 
LTO-4 tape autoloader. The MDL-IOOS 
can enhance batch processing, DFHSM, 
backup, and data processing restoration. 
The MDL-IOOS, offered in FICON or 
ESCON configurations, starts at $35,000. 

■ DataCore Software 
Advanced Site Recovery 

DataCore Software introduced its ASR 
(Advanced Site Recovery) solution, which 
is a part of DataCore' s business continuity 
portfolio that lets users spread disaster 
recovery responsibilities across several 
smaller sites. The offering works with both 
physical and virtual servers; lets system 
administrators locally or remotely execute 
the disaster recovery plan; doesn't require 
redundant disk arrays and specialized net- 
working gear; and is capable of sending the 
VMs and the storage to a remote site, as 
well as recovering it from the remote site. 
Advanced Site Recovery is available start- 
ing at $2,000 per site. 

■ Dot Hill 2330, 2530, 2730, 2730T, 5730 
&2130 

Dot Hill announced it completed quali- 
fication of Western Digital's 2TB enter- 
prise SATA drives and claims the world's 
first 24TB RAID storage arrays that fea- 
ture a compact 2U footprint. The compa- 
ny' s arrays leverage WD's enterprise- 
class WD RE4-GP 2TB drives with WD 
GreenPower Technology. Dot Hill claims 
lab tests demonstrated its 24TB RAID 
array outfitted with the WD RE4-GP 2TB 
drives boasted an up to 60% power reduc- 
tion over that used by standard 1TB drive 
technology. WD's RE4-GP 2TB drives 
currently come with Dot Hill's 2330, 
2530, 2730, 2730T, and 5730 storage 
arrays as well as the 2130 JBOD expan- 
sion arrays. 

■ Peak 10 CommVault Simpana 

Peak 10 announced an upgrade to its 
backup platform, which now includes 
CommVault Simpana software. The backup 
platform is designed to ensure superior cus- 
tomer service, reliability, and data avail- 
ability. The platform integrates the Sim- 
pana data backup, restore, replication, 
archive, and resource management software 
modules. 

■ Quest Software Storage Horizon 

Quest Software announced Storage Ho- 
rizon, its latest storage capacity manage- 
ment solution. Storage Horizon measures 
actual storage usage, assists with provision- 
ing and purchasing decisions, and auto- 
mates storage analysis and reporting. The 



m SOFTWARE' 

solution reduces storage costs due to 
decreased storage capital expenditures and 
decreases operational costs. Storage Ho- 
rizon also offers support for 3PAR InServ 
arrays. 

■ RAID Razor SSD 

RAID announced a redundant controller 
version of the Razor SSD. The lU system 
for 2.5-inch SAS or Fibre Channel SSDs is 
further protected by RAID's StorageWatch 
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proactive monitoring service. The 12-bay 
Razor can handle more than 130,0001/Ops 
with a 1.4GBps throughput, according to 
the company. It's available with SLC 
NAND flash SSDs with 32GB or 64GB 
capacities, with a 128GB capacity unit 
scheduled to be released before the end of 
the year. 

■ Sans Digital EliteNAS EN104L+/EN104L+B 

Sans Digital announced the first NAS to 
use the Intel Atom 330 1.6GHz 1MB cache 
dual-core processor with Hyper-Threading. 



fee 



Sans Digital claims a substantial perfor- 
mance boost from the new silicon, as the 
EliteNAS EN104L+'s SOMBps transfer 
speed per Gigabit Ethernet connection (it 
includes two) bests Sans Digital's previous 
model by a 30MBps margin. iSCSI, RAID 
5/6, active-active balancing, snapshot, and 
folder replication are also included. 

■ Seagate Cheetah 15K.7 

Seagate released a 15,000rpm server 
drive, the Cheetah 15K.7 enterprise-class 




hard drive. The 3.5-inch Cheetah 15K.7 is 
the first to come in a 600GB capacity (min- 
imum 36GB). Its dynamic PowerTrim tech- 
nology is designed to minimize energy 
draw in the data center, and the drive offers 
1.6 million-hour MTBF. The drive can seek 
data as fast as 3.5ms and features a sus- 
tained read rate of about 150MBps. It 
comes in both 6Gbps SAS and 4Gbps Fibre 
Channel editions. 

■ Symantec NetBacl<up 

In an effort to give companies a tool to 
improve operational and storage efficiencies 
across both physical and virtual environ- 
ments, Symantec announced an updated ver- 
sion of its NetBackup platform. Designed to 
offer rapid information recovery and reduce 
overall complexity, NetBackup combines 
disk backup, data deduplication, virtual 
machine protection, and continuous data pro- 
tection and replication technologies. Other 
features include single file restore for virtual 
machines on multiple platforms, support for 
Microsoft Server 2008, and support for third- 
party storage appliances. 

■ Synology Racl< Station RS409 

Synology released the Rack Station 
RS409, a lU, four-bay NAS server aimed 
at corporate workgroup users. Shipping 
with a 1.2GHz processor, 256MB of DDR2 
RAM, two GbE ports, two USB 2.0 ports, 
one eSATA port, and support for up to 128 
concurrent connections, the RS409 comes 
with four hot-swappable drive trays that 
each support 2TB SATA-based storage. 
Storage can be expanded to 16TB via eight 
hard drives through the connection of a 
Synology RX4 eSATA cable. The RS409 
ships with Disk Station Manager 2.1 
software that includes Windows ADS 



integration, cross-platform data sharing, 
RAID data protection, and business appli- 
cations. A Mail Station add-on lets the 
RS409 function as a mail server supporting 
Web mail, SMTP, P0P3, and IMAP. A 
Web Station app supports the hosting of up 
to 30 Web sites on one RS409. 

■ Verbatim SureFire FW/800/USB2 

Verbatim announced a portable line of 
hard drives, the SureFire FW/800/USB2 
HDDs. Sporting both Fire Wire 800 and 




USB 2.0 connections, the drives plug into 
Windows and Mac systems, and they sup- 
port Leopard's Time Machine. The 250GB 
($109.99), 320GB ($139.99), and 500GB 
($179.99) drives are each housed in a black 
aluminum case that's resistant to finger- 
prints. Additionally, the 2.5-inch drive 
boasts 5,400rpm and features 8MB of 
cache memory. 

■ Verity CopyDisc Ice2 

Verity released an automated disc print 
station called CopyDisc Ice2. The station 
includes two bulk-ink printers and a 660- 
disc capacity. The CopyDisc Ice2 prints at 
4,800 dpi, photo-quality resolution. The 
printer can produce 1,500 full-color discs 
on one set of ink cartridges, so users can 
print 3,000 discs before a cartridge change 
is needed. The CopyDisc Ice2 is operated 
via USB and includes networking software. 
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Barracuda Backup Service 
Integrates Local & Secure Offsite 
Backup For Disaster Recovery 

Starts at $49 per month 

(888) 268-4772 
www.barracuda.com/backup 




NETWORKS 

Award-winning security, networldng 
and storage solutions benefiting more 
tlian 85,000 customers worldwide. 



Onsite And Cloud Storage With Deduplication 

Barracuda Backup Service 

The Barracuda Backup Service is an affordable, integrated 
local and offsite data backup and disaster recovery solution 
that combines an onsite appliance with a monthly subscrip- 
tion that replicates data to two offsite locations. Combining 
local and offsite storage provides the best of both worlds— 
onsite backups for the fastest restore times and secure, off- 
site storage for disaster recovery. 



Designed for organizations of any size, the Barracuda Backup 
Server creates a local copy of data and efficiently transfers the 
data offsite without any additional burden on production serv- 
ers. Offsite storage is monitored and managed by Barracuda 
Central as part of the Barracuda Backup Subscription, and tech 
support and emergency restores are included, as well. 



Deployed in varied, complex IT environments, the Barracuda 
Backup Service protects mission-critical business information, 
utilizes industry-standard networking protocols to access data 
for backup, and is compatible with all major operating systems. 

The Barracuda Backup Service Web control panel makes 
it easy to manage and back up data to multiple units at 
one or more locations— from anywhere. It also provides 
control of settings, reports, restores, statistics, and ac- 
count information in order to manage Barracuda Backup 
Servers and Barracuda Backup Subscription plans. In ad- 
dition, customers receive automated alert notifications via 
the Web control panel when conditions affecting backup 
service are detected. 
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'The Cyber Switching team enabled us to 
understand our power management issues , 
and the products have an ROI that is 
quantifiable . . . that is value add to my 
budget. The sales and technical team 
goes above the call to make sure we have 
just what we need, when we need it." 

Data Center Manager 
Fortune 1 000 Company 
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DualcomS 
A Cyber Breaker® for each outlet 
Monitor current on each outlet 
Intuitive user interface 
Controllable up to 1 000+ outlets 
using EMC software 



Powering Up Your Network 
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THB Module 

• Monitor temperature and humidity 

• Sends alerts when any condition is out of bounds 

• Secondary remote sensor allows monitoring of 
environmental change of geographic area up to 30 feet 

^Optional hardware: External sensor requires separate purchase. 
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www.cyberswitching.com • (408)436-9830 • (408) 436-9828 Fax • (888) 311 -6277 Toll Free 
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Some of Our Valued 
Customers Include: 

Adobe Systems 
ANL 

Blue Cross Blue Shield 

Brocade Communications 

Cisco Systems 

ConSentry Networks 

Department of Defense 

Extreme Networks 

Hewlett-Packard 

Intel 

Jabil 

NEC 

Telenav 

WebEx 
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Enrollment 

In Graduate Science 

Courses On The Rise 

More and more graduate students continue 
to enroll in science (2.4% growth year over 
year) and engineering (5.9%) classes, 
according to 2007 data reported by the 
National Science Foundation. Of primary 
interest to the IT world is the fact that the 
number of computer science grad students 
increased for the first time in half a decade, 
posting a 2.7% gain. 

"Over half a million graduate students are 
enrolled in science/engineering studies in 
the U.S.," says Susan T. Hill, senior analyst 
on the Survey of Graduate Students and 
Postdocto rates in Science and Engineering, 
aka the Graduate Student Survey. "The 
number of graduate students in S&E has 
increased every year since 2000, growing 
from over 400,000 to over 500,000 in 2007." 

The study was authored by National Science 
Foundation research analysts Laura Burns 
and Peter Einaudi, along with Patricia Green, 
program director of RTI International. It incor- 
porates figures from the NSF's Division of 
Science Resources Statistics. 

"Almost three-fourths of S&E graduate 
students are enrolled full-time," says Hill. 
"Increasing enrollments are expected to 
continue, as full-time S&E graduate stu- 
dents enrolled for the first time in Fall 2007 
reached 100,000 for the first time ever. In 
2000, this number was about 78,000." 




The report indicates a continuing trend 
toward gender parity and ethnic diversity 
among S&E grad students, although white, 
non-Hispanic males still predominate. The 
growth in the number of women enrollees 
slightly outpaced the rate of increase in 
men in science and engineering programs. 
Likewise, the non-white segment of S&E 
graduate students continues to grow, as it 
has throughout the decade. 

In contrast to other S&E disciplines, in 
which permanent U.S. residents hold the 
majority, two-thirds (67%) of first-time, full- 
time enrollees in computer science were 
foreign students/temporary visa holders. 

"Although first-time, full-time graduate students 
enrolled in S&E fields are comprised of about 
two-thirds U.S. citizens/permanent residents 
and one-third foreign students, the driving 
force for much of the increase in first-time, full- 
time graduate enrollment was from foreign 
students on temporary visas," Hill says. "In 
2007, this group increased 8% over the pre- 
vious year, compared with U.S. citizens/ 
permanent residents with an increase of 2%." 

Hill adds that 2009 Graduate Student Enroll- 
ment data may become available from the 
NSF by the end of the year. 

by Marty Sems 



Smart Power Strips 

Bay Tech's Customizable MMP Power Strips 
Monitor Power At The Server Level 



by Robyn Weisman 

As DATA CENTERS GROW and the cost of 
energy continues to rise, the abihty to mon- 
itor power usage can potentially save your 
organization a great deal of money. The 
U.S. Energy Information Administration 
has reported that the average price of elec- 
tricity for enterprises has gone up from 7.4 
cents per kilowatt-hour in 2000 to 9.7 cents 



amount of power your servers are using. Its 
modular nature means that you can specify 
a configuration for your power strip, and 
Bay Tech can put together the combination 
with ease. 

The MMP is unique among power strips 
because of this modularity, providing users 
with the maximum degree of flexibility in 
the ways in which they would like their 
receptacles to be laid out on a given MMP 



BayTech 



per kilowatt-hour in 2007, a 30% increase, 
says Melanie Davy, a research analyst at 
Info-Tech. 

"As prices continue to increase, so will the 
costs. As costs increase, they must be added 
to the IT budget, possibly taking away from 
other projects or initiatives," says Davy. "A 
growing number of IT shops seek to quanti- 
fy energy as an operational cost, just like 
line items such as staffing and maintenance. 
Once the cost is accounted for, IT has a 
number to improve on." To quantify those 
costs, intelligent power 
equipment is paramount. 

Server-Level Monitoring 

When choosing a power 
strip, the most important 
feature IT and data center 
managers need to look for 
is a product that monitors 
and meters power con- 
sumption, says Davy. 
"While the power strip 
can provide this informa- 
tion at the box level, IT 
should be looking to mea- 
sure and monitor power 
consumption on a server 
level for best results. 
Server-level monitoring 
allows IT to make the nec- 
essary changes where 
changes need to be made," 
she says. 

The MMP (Modular 
Metered Power) line of 
power strips from Bay- 
Tech (800/523-2702; 
www.baytech.net) mea- 
sures the amount of power 
a server is using. "If a cus- 
tomer wants to see how 
much power [this] particu- 
lar server [has] used over 
time compared to this par- 
ticular server of a different brand ... the 
MMP can tell them," says Alex North, direc- 
tor of business development at BayTech. 

True IVIodularity 

North calls the MMP line the Cadillac of 
power strips because it can perform so 
many tasks in addition to tracking the 



power strip. "They can say. This is where I 
want the receptacles to be in the elevation 
of the rack,'" says North. "If they need 
higher density from [their] receptacles, they 
pick modules with higher receptacle counts 
and chassis that are longer or have more 
slots in them." 

Standard features in the MMP line include 
single-phase, two-phase, and three-phase 
power options; 20A, 30A, 50A, and 60A 
support; HTTP-based and SSH text inter- 
faces; RADIUS and TAG ACS (Terminal 
Access Controller Ac- 
cess Control System) 
remote authentication 
protocols; and tool- 
less mounting. In 
addition, all power 
receptacles are moni- 
tored individually, 
showing the kilowatt- 
hour meter per outlet 
along with current 
levels and voltage 
levels. If a given re- 
ceptacle falls below a 
0.8 power factor, for 
example, it sets off 
an SNMP-based trap 
that alerts you to the 
problem. 

Although BayTech 
offers several types 




BayTech MMP 
Powerstrip Product Line 

(800) 523-2702 
www.baytech.net 

Description: A line of modular power 
strips that provide users with the ability 
to track server power levels; outlet 
metering that enables users to read 
current levels, watts, and volt-amps; 
PCB power distribution; monitored 
circuit breakers; and integrated sensor 
inputs that allow users to measure 
temperature and humidity. 

Interesting Fact: Founded in 1976, 
BayTech started out as a contractor 
for the Stennis Space Center spe- 
cializing in environmental monitoring. 
Later the company made wind instru- 
ments for the FAA and flow instru- 
ments for the EPA, says Alex North, 
director of business development at 
BayTech. 




of configurations. North points out that 
those setups are just starting blocks. "You 
can virtually build this strip as you want it 
to be, and we see some pretty crazy 
requests," says North. One customer that 
had 20A three-phase power asked for a 
power strip with 12 C13 connectors and 12 
C19 connectors on the power strip. 



"Three of the C19s could draw all the 
power that a 20A three-phase could ever 
think about providing," North explains. 
"But it's not quirky to them [because] they 
want to have easy access to the receptacle 
type anywhere in the rack elevation, so if 
they are running a communications cabi- 
net that has two large switches, then they 
want to have a C19 at rack level two and 
at rack level 22. That's the only area 
where it makes sense to put a mixture of 
such high-amperage receptacles in a low- 
amperage input, although electrically it 
makes absolutely no sense." 

Being Green & Saving Green 

According to North, the MMP line is 
designed for people who really want to 
know the minutiae of their power usage. 
"You can find out over the last hour if it 
has been running at a 5kW rate and say, 
'You know the cooling we have for that 
space in the data center is only supporting 
3kW.' Boom. Internal sensors [show] you 
have a hot spot, and it's very important in 
today's data center layout to know where 
those hot spots are," North says. 

In addition, all MMP power 
strips come with built-in temper- 
ature and humidity sensor ports 
so that users do not have to shell 
out for another device to run 
these types of sensors — and users 
can set alarms for these sensors 
just as they can for any other 
power feature. 

BayTech uses only PCB 
(printed circuit board) power dis- 
tribution connector technology. 
North says PCB construction is much more 
reliable than using ISD (insulation dis- 
placement) connectors that many of 
BayTech' s competitors use. 

"We realize our main job is to get power 
to the server. If you lose power, you're 
going to get the toe tag in that data center. 
You're out of there," North says. 
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Upsite Technologies 

(888) 982-7800 
www.upsitetechnologies.com 



It's About More Than 
Plugging Cable Openings 



Most cost-minded data center managers realize that the best 
practice of sealing cable openings not only helps achieve cooling 
and airflow efficiencies, but greatly reduces operating and capi- 
tal expenditures. In fact, sealing even the smallest of cable open- 
ings helps manage thermal and airflow challenges for total data 
center optimization. Upsite Technologies expanded the KoldLok® 
family of engineered sealing solutions with the KoldLok Mini 
Raised Floor Grommet to help the data center industry optimize 
their cooling and airflow power, and maximize their costs. 



With its engineered design and proven 
history in reducing infrastructure costs, 
the KoldLok family of products has an 
immediate impact on cooling capacity 
optimization; and in the long-term, lowers 
TCO and reduces carbon footprints. 
Large, successful companies cannot toler- 
ate unreliability, downtime, or the high 
energy costs associated with inferior solu- 
tions in their data centers. With KoldLok 
products, leading companies get proven 
raised-floor sealing solutions requiring no 
maintenance and continue to save costs. 



Designed with virtually all of the orig- 
inal KoldLok features, the fire-rated 
KoldLok Mini Raised Floor Grommet at 
4x6 inches (100 x 150 mm) is engi- 
neered to be the most effective and 
smallest sealing solution available. 

"The KoldLok Mini Grommet is 
designed to meet smaller cable opening 
standards specified in new builds, and 
works well in retrofits. What conscien- 
tious data center managers realize is 
sealing even a small opening can have a 
positive effect on existing cooling unit 
capacity," says Michele Galleazzi, 
KoldLok Product Manager at Upsite 
Technologies. "The KoldLok Mini 
provides a low-cost-of-entry way to 
optimize airflow immediately and 
save money in the long term." 

Proof is evident for many satisfied 
data center managers worldwide. In 
a financial impact study conducted 
in a 10,000 ft^ computer room with 
400 KoldLok Grommets installed, 
simple OpEx payback occurred 
within the first two months, there 
were annual OpEx energy savings 
of $50,896, and one-time cooling 
unit CapEx savings of $90,000. 

"After extensive research in the 
field, we discovered that our data 
center customers require more var- 
ied and flexible solutions to treat 
multiple cable opening sizes," says 
Peter Crook, Vice President of 
Business Development. "We're 
excited to help data centers lower 
data center energy costs and exe- 
cute their energy efficiency initia- 
tives with the KoldLok Mini." 

Upsite has established itself as the 
organization that produced the origi- 
nal research, along with the Uptime 
Institute, about the true causes of lost 
and wasted energy use. Upsite was 
the first to offer the engineered solu- 
tion to solve this challenge and 
continues to research cost efficien- 
cies in the data center. Over the 
years, Upsite' s studies have revealed 
that the reliability, availability, and eco- 
nomic well-being of the data center are at 
risk, and that the industry will continue to 
suffer without well-engineered solutions. 
Many, if not all, of the products now 
offered in the marketplace are based on 
the collaborative research that originated 
with Upsite and the Uptime Institute. 

As the most effective sealing solution 
chosen by many Fortune 100 companies 



worldwide, the KoldLok Raised Floor 
Grommets, now including the KoldLok 
Mini, offers a versatile suite of proven 
products: 

• KoldLok Mini Raised Floor Grommets 
seal smaller openings in new data cen- 
ters that have multiple cable opening 
sizes, and offer a handy way to split 
power and data cabling. 

• KoldLok Surface Mount Raised Floor 
Grommets can be used for retrofit 
projects to seal a variety of existing 
raised-floor tile cutouts and allow the 
flexibility of removing tiles without 
capturing cables. 




upsite 

technologies® 



How does the expanded KoldLok fam- 
ily of sealing solutions achieve this? All 
KoldLok products offer a virtually perfect 
seal, which can significantly increase 
existing cooling unit capacity by enabling 
more effective delivery of cooled air to IT 
equipment air intakes. The installation of 
KoldLok products helps reduce the need 
to purchase additional cooling units. Their 




Before: Real air-intake temperatures in an actual 
data center before installing KoldLok products 

Before KoldLok products were installed, a foam 
product was used to plug holes and fans were used 
to cool the computer room. Temperatures reached 
94°F, 13+ degrees higher than is recommended by 
the American Society of Heating, Refrigerating, and 
Air-Conditioning Engineers (ASHRAE). 



KoldLok Extended Raised Floor 
Grommets seal a variety of existing 
larger openings along the wall, with 
the added flexibility of modification 
for unique openings. 
KoldLok Integral Raised Floor 
Grommets seal cable openings in new 
raised-floor systems prior to the instal- 
lation of communication or power 
cabling. 



Aft€ Real air-intake temperatures in an actual 
data center after installing KoldLok products 

After KoldLok products were installed, virtually all 
temperatures dropped below the recommended 
80.6T, resulting in increased cooling optimization 
and greater overall data center efficiency. 



effectiveness, durability, low maintenance, 
and adaptability to a wide variety of cable 
opening configurations have established 
the added value of the KoldLok sealing 
solutions in the industry, especially for 
reducing infrastructure overhead and cut- 
ting cooling costs. After witnessing the 
results of the KoldLok product seal, it's 
clear that it's about much more than just 
plugging cable openings. 



Fujitsu Services Saves Significant 
Energy Costs and Witnesses a Six- 
IVIontli Return on Investment by 
Installing KoldLok Raised Floor 
Grommets 



Fujitsu Services, the European IT services arm of the 
US$43.2 billion (£21.8 billion) Fujitsu Group, is head- 
quartered in London, and employs more than 19,000 
people across 20 countries. By tackling data center 
hotspots, inefficient cooling capacity, and increases 
in power consumption, Fujitsu Services sets the 
benchmark for other companies looking to reduce 
their IT carbon footprint and minimize the impact 
soaring energy costs have on their bottom line. The 
company has recently implemented best practices in 
its new UK data center facility to not only reduce the 
environmental impact of the facility, but also to 
address the financial implications of rising power 
costs on its business. 

Data Center Services 

Fujitsu Services delivers IT service to more than 200 
mid-sized businesses and multinational clients in the 
private and public sectors across Europe, including 
retail, financial services, utilities, healthcare, and 
Government. Their data center management services 
business helps customers realize the value of infor- 
mation technology through the application of consult- 
ing, systems integration, and managed service con- 
tracts. These clients demand efficient and reliable 
data center environments, which are achieved, in 
part, by the precise management of the airflow. 

Before discovering KoldLok Integral and Extended 
Raised Floor Grommets, Fujitsu Services used vari- 
ous other methods for sealing holes in the raised 
floor, but none were completely satisfactory. In addi- 
tion to slightly inferior airflow-blocking qualities, 
installation times were excessive, as were lead 
times when ordering. 

The KoldLok Installation 

Approximately 400 KoldLok Grommets are now 
installed across two of Fujitsu Services' 30 data cen- 
ters in its North London facility ((3,688 m2 or 39,697 
ft2 of space), but they are confident that this number 
will increase significantly in the next one to two years. 

"Ensuring there's no wasted cooling is vital," says 
Chris Flanagan, Data Center Development Manager 
of Fujitsu Services. "Accurate control of the airflow 
through installation of the KoldLok Grommets allows 
us to consider energy-savings strategies such as 
increasing CRAC set points." 

Data Center Energy and Cost Savings 
through KoldLok Installation 

in less than six months, Fujitsu Services has saved 
€10,000 (US$19,700) on its energy bill for just one of 
its data centers where KoldLok Grommets are 
installed. And Fujitsu's return on investment was evi- 
denced within the first six months. 

"Every penny counts, even in a large company such 
as Fujitsu. Our improvements through KoldLok solu- 
tions ensure that the client's IT is housed in a 
resilient and energy-efficient data center. With a 
healthy data center Fujitsu can deliver highly reliable 
Data Center Managed Services, but cost effectively 
and with a reduced environmental impact. Everyone 
wins," says Flanagan. 
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Taking Virtualization 
To The Next Level 

Diskeeper V-locity Eliminates 
Virtual Disk I/O & Frees Disk Space 



by Kris Glaser 

Virtual machines suffer 
twice as much fragmentation 
as their physical counter- 
parts, resulting in significant 
performance bottlenecks. 
Diskeeper V-locity is 
designed to eliminate virtual 
disk I/O bottlenecks, maxi- 
mize virtual server speeds, and free up 
disk space on Microsoft Windows Server 
2008 Hyper-V 

"Hyper- V, and virtualization platforms 
in general, offer both new solutions and 
new challenges to IT professionals," says 
Michael Materie, Diskeeper' s director of 
product, technology, and service strategy. 
"The disk has long been known as the 
weak link in the performance of a com- 
puter. With that weak link being shared 
amongst virtual systems, optimizing its 
performance is vital to the overall per- 
formance of the entire platform." 

VHDs (virtual hard disks) set to dy- 
namically grow do not regain their storage 
when information is removed. That means 
valuable storage space is wasted on 
"VHD bloat." V-locity simplifies the 
removal of VHD bloat by showing how 
much each virtual disk can be compacted 
and offering the tools to accomplish it. 




Small and midsized enter- 
prises will benefit from V- 
locity's ability to eliminate 
performance issues related to 
I/O traffic by invisibly de- 
fragmenting files and consol- 
idating free space. Using 
Diskeeper's InvisiTasking 
processing technology, V- 
locity works in the back- 
ground and uses only idle resources to 
ensure there is never a resource conflict. 
V-locity also optimizes peak server per- 
formance and reliability to the entire virtu- 
al platform by synchronizing the ongoing 
activity between the host computer and 
multiple guest operating systems. 

Diskeeper 

corporation ■ 



V-locity 

A virtual platform disk optimizer 
that eliminates I/O bottlenecks, 
maximizes virtual server speeds, 
and frees up disk space. 

$199.95 per CPU core 

(818) 771-1600 

www.diskeeper.com 



Building For The Cloud 

BLADE Networks Technologies & 
Bell Microproducts Provide The Tools 



by Seth Colaner 
• • • 

BLADE Networks Technologies and 
Bell Microproducts are well aware that 
cloud computing is a growing interest 
among computer users and that data center 
managers are looking into ways to prepare 
for transitioning all or part of their opera- 




tions to cloud-readiness. In response, the 
companies have incorporated BLADE's 
10 GbE solutions into BLADE's Cloud 
Ready Network Architecture. 

Dan Tuchler, vice president of strategy 
and product management for BLADE 
Network Technologies, says, "What we're 
strictly talking about is architectures with- 
in the data center, how you put together 
servers, racks of servers, networks togeth- 
er with them, and build out the data center 
in a more flexible way." 

Tuchler believes there are five require- 
ments for being truly cloud-ready: Data 
centers need high bandwidth and low 
latency data transfer, and this can be facil- 
itated through convergence to Ethernet for 
everything from network traffic to storage 
traffic. Data centers also must be able to 
handle agile workloads, as applications, 
guest operating systems, and workloads 
move around the network and need to be 
tracked correctly. Further, data centers 



need tools that can scale quickly. Finally, 
any components must be "green," low- 
power solutions. 

There are several technologies included 
in BLADE'S Cloud Ready Network Arch- 
itecture. One of the most notable is the 10- 
Port 10Gb Ethernet Switch Module, an 
FCoE- (Fibre Chanel over Ethernet) ready 
device with lOOGbps total uplinks 
(lOGbps each for 10 ports). The switch 
offers lossless Ethernet with CEE (Con- 
verged Enhanced Ethernet) capabilities 
with low latency while consuming low 
power. Data centers can also utilize 
blade's Cloud Ready solutions along 
with HP or IBM blade server solutions that 
are outfitted with Blade's server switches. 
Additional components include the 24-port 
Racks witch G8124 with VMready soft- 
ware, SmartConnect I/O Virtualization, 
and the BLADEHarmony Manager. 

BL7\DE 



BLADE Network Technologies 
10 Gigabit Ethernet Cloud 
Ready Network Architecture 

Provides components to build a 
cloud-ready architecture, including 
hardware and software tools. 

(408) 850-8999 

www.bladenetwork.net/pad1 



Better Control 
Over Applications 

Palo Alto Networks PAN-OS 3.0 Offers 
naffic Shaping & SSL VPN Functionality 



by Blaine Flamig 

Even as more organizations increasing- 
ly turn to Internet- and consumer-based 
applications to help employees carry out 
business-related tasks, many companies 
continue to rely on outdated security 
measures based on "block or allow" 




approaches. Conversely, Palo Alto 
Networks' upgraded PAN-OS 3.0 operat- 
ing system for the company's enterprise- 
class firewalls allows companies to add 
new applications to their arsenal while 
controlling security risks by providing 
administrators granular, intelligent visi- 
bility into the applications in use. 

"Customers have told us, 'applications 
aren't threats,'" says Chris King, Palo Alto 
Networks director of product networking. 
"Organizations need a variety of respons- 
es to applications, including allow, deny, 
scan for threats, or limit by user, function, 
or time, among other features." 

With PAN-OS 3.0's traffic-shaping fea- 
tures, system administrators not only gain 
visibility into applications running on 



company networks, they can control 
application priority and the bandwidth 
that applications use from within the fire- 
wall policy vs. taking the often-impracti- 
cal approach of outright blocking apps. 

PAN-OS 3.0 also adds SSL VPN func- 
tionality that combines an easy-to-deploy 
secure network extension model with 
visibility and control over users, content, 
and applications. This gives enterprises a 
new option for SSL VPN deployments, 
moving beyond the traditional either/or 
choice of an easy, no-control VPN or an 
expensive, high-control extranet portal. 
PAN-OS 3.0 runs on Palo Alto Networks' 
next-generation firewall hardware, utiliz- 
ing the company's high-performance sin- 
gle-pass parallel-processing architecture. 




paloalto 
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Palo Alto Networks PAN-OS 3.0 

Provides increased visibility into 
and control over network applica- 
tions. 

Free to customers with current 
software maintenance contracts 

(408) 738-7700 

www.paloaltonetworks.com 



Password 
Administration 
IVIade Simple 

Secure SignOn Lets Users 
Memorize Just One Password 



^ Secure SignOn , 











by Andrew Leibman 
• • • 

Despite being outdated and easily 
breached, the old single username and 
password scheme (single-factor authenti- 
cation) is still the security solution of 
choice for most businesses. These organi- 
zations are often reluctant to move to a 
more powerful option because doing so 
typically involves multiple logons and 
complicated user-generated passwords. 

FinallySecure, a division of SECUDE, 
launched the latest version of its flagship 
E-SSO (Enterprise Single Sign-On) soft- 
ware, Secure SignOn 7.0, which is one of 
the core components of SECUDE's 
Unified Single Sign-On solution. Secure 
SignOn 7.0 requires users to memorize 
just one password instead of several, and 
password generation and change is per- 
formed without user input to ensure maxi- 
mum security. The offering delivers 
improved protection; better usability; an 
intuitive management tool; a new learning 
wizard; enhanced support for Web, 
Windows, Java, and Terminal applica- 
tions; and support for a variety of smart 
cards, USB tokens, and JavaCards. And 
the product was engineered from the 



ground up to easily integrate with existing 
IT infrastructure. 

One aspect of Secure SignOn 7.0 that 
sets it apart from similar offerings is sup- 
port for both smart card and non- smart 
card environments. Other features include 
Web access tied to a toolbar for Microsoft 
Internet Explorer and Mozilla Firefox, 
SSO without a smart card, an SSO Wizard 
that automatically detects login dialogs, 
and SSO authentication to Web- and 
Desktop-based Java applications and 
Citrix Presentation Servers. 
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FinallySecure 



Secure SignOn 7.0 from 
FinallySecure 

An Enterprise Single Sign-On offer- 
ing that delivers robust security 
without forcing end users to memo- 
rize multiple complicated logins. 

(706)216-8609 

finallysecure.com 
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Locate The Gaps 

Riverbed Cascade Helps Deliver 
Applications To Distributed Workers 



by Nathan Lake 
• • • 

In enterprises with geographically 
distant branches, IT staffers need to mon- 
itor how WAN resources are being dis- 
tributed to optimize and maintain appli- 
cation performance. Riverbed Cascade 




offers enterprise-wide visibility, includ- 
ing application and interface baselining 
and data on server and application de- 
pendencies, to help locate bottlenecks. 

Charles Kaplan, product marketing 
manager for Riverbed's Cascade, says 
rather than using scanning-based snapshot 
views or expensive agent-based views. 
Cascade uses agentless, passive on-the- 
wire methods to produce discovery and 
dependency data, captured on a continu- 
ous basis. "Data center employees that 
perform change management or moves 
and consolidations would find the real- 
time data extremely valuable," he says. 

"Riverbed Cascade is reliant on net- 
work-flow data, be it net-flow from 
Steelhead or anyone else's protocol," 
Kaplan says, "so you won't need to 
install agents or probes — meaning no 
change windows that are operationally 
intensive to get up and running." 



Riverbed Cascade is automated and 
learns about who talks to whom, when, 
how long, via what infrastructure, and 
with what kind of performance. From 
that data, it builds models to determine 
the normal level of activity and perform- 
ance on your network. Alarms are gener- 
ated if meaningful change from the 
baselines occurs. It can create applica- 
tion-centric, site-centric, and business- 
centric views to help managers address 
the critical challenges they face. 

Cascade also lets users see the appli- 
cation delivery path. For example, 
Kaplan says, "it shows you each inter- 
face the application went across from 
server to client, providing very valuable 
operational details to show you how to 
optimize, debug, and secure the environ- 
ment based on the path of delivery." 

riverbed 

Think fast: 



Riverbed Technology Cascade 

Provides advanced networ[< and 
application performance analysis 
and reporting. 

Pricing starts at $36,995 and is 
sized based on flow volume 



(415) 247-8800 
www.riverbed.com 



Improve Your Cabling 

Power Cabling Custom Jumper Cords 
Can Help With Cooling, Organization 




by Corey Russman 

There's little doubt that cooling is one 
of the biggest challenges facing data center 
facility managers. Adding to the problem 
are the black jumper cords found in most 
data centers. These cords are typically 
about 6 feet in length, which is excessive 
in most cases. This not only creates confu- 
sion but also creates a nest of cords that 
makes cooling much more difficult. 

Power Cabling's custom-colored jump- 
er cords have become the new craze in 
server power and come in virtually any 
color, length, and plug/connector configu- 
ration. The custom-length cords are UL- 
listed and tested and make it easier for 
your data center to stay organized, which 
means the backs of your server racks will 
be less cluttered and trap less heat. 

Power Cabling's custom-colored jump- 
er cords can be used to differentiate your 
A side power from your B side power. 
Many facility managers and electrical 
contractors have chosen to also switch to 



this concept for their liquidtight. The col- 
ored jumper cords can be used to coordi- 
nate with colored liquidtight under your 
raised floor, keeping things much more 
organized and helping to avoid accidental 
outages caused by confusion and human 
error. With custom-colored jumper cords, 
the custom color and length make it is 
easy to spot when a server is not plugged 
into the proper power strip. 

These cords are manufactured in the 
same facility as power cables by Power 
Cabling's parent company, Electri-Cord 
Manufacturing, which also specializes in 
custom harness and box builds. Power 
Cabling is a leading manufacturer of UL- 
listed, 100% tested, and factory priced 
power distribution cables and has factories 
in Westfield, Pa., and Eagan, Minn. Most 
of its quotes are delivered within an hour 
of the request, and most of its cable orders 
ship the same day they are ordered. 



Power Cabling 



Power Cabling Custom-Colored 
Jumper Cords 

Come in virtually any color, length, 
and plug/connector configuration. 

(800) 658-0888 

www. powercabi i ng .com 



Battery-Free Outage 
Protection For RAID 

Adaptec Unveils Zero-Maintenance 
Cache Protection 



by Marty Sems 

Storage reliability is 
paramount. The content of / ; 
a RAID controller's cache ' ""^ 
can be information that's 
critical to a business, so its 
backup mechanism is equally critical. 

Traditionally, enterprise RAID con- 
trollers have used battery backup units to 
keep the volatile cache memory powered 
on and maintaining its data in the absence 
of interface power. Those batteries occa- 
sionally need to be conditioned to extend 
their lives and replaced when they're no 
longer able to supply a practical amount 
of runtime. This required maintenance 
costs enterprises both labor and materials. 

New controller cards from Adaptec 
offer a shift to a more logical paradigm. 

"In today's demanding data centers and 
the fast growing universe of on-demand 
cloud computing environments, providing 
full protection for all data in the I/O path, 
from data in the controller cache to data in 
drives, is mandatory," says Scott Cleland, 
director of marketing at Adaptec. "By uti- 
lizing SSD flash technology, Adaptec's 
new Series 5Z RAID controller family 
provides the first maintenance-free solu- 
tion for protecting cached data in virtually 
all disaster scenarios." 




Because the new 5Z 
series of RAID controllers 
uses 4GB of nonvolatile 
flash memory for cache 
backup, it avoids the main- 
tenance issues of batteries, 
which means lower operating 
costs over time. NAND flash 
can also store cached data for about a 
decade, unlike batteries, which only offer 
a few days worth of protection under the 
best of circumstances. 

The innovative, speedy lineup of 
Unified Serial® (SATA/SAS) cards 
includes the Adaptec RAID 5405Z (four 
internal ports, $785), 5805Z (eight inter- 
nal ports, $965), and 5445Z (four inter- 
nal/four external ports, $1,045). 

adap^ec^ 



Adaptec RAID 5445Z, 5805Z, 
5405Z 

Offer a way to boost RAID reliabili- 
ty and cut maintenance costs with 
NAND-based cache backup 

Start at $785 

(408) 957-7274 

www.adaptec.com 



When Your PC Goes FJat,,, 




Simple & Quick 
Baclcup & Recovery 

CMS Products BounceBack Ultimate 



by Seth Colaner 
• • • 

Every data center employee knows 
the necessity of backup and recovery 
solutions. CMS Products' BounceBack 
Ultimate is designed to be a "digital 
spare tire" for PCs, allowing users to 
back up and restore the entire contents 
of a PC, including applications, data, 
personal settings, operating system, par- 
titioning, and formatting. 

Features include Instant PC Recovery, 
which lets users start up a PC from an 
external USB hard drive in case the 
operating system or hardware malfunc- 
tions, and instant One-Button Recovery, 
which is a simple and direct way of 
restoring a PC hard drive without the 
need for reinstalling anything. The 
QuickRestore function also lets users 
quickly restore specific files and folders. 

Other features include CDP (Contin- 
uous Data Protection), a function of 
BounceBack Ultimate that continuous- 
ly keeps new or modified files up-to- 
date; the ability to let Bounce-Back 
Ultimate run its processes in the back- 
ground so users can continue to work 
while the program takes care of busi- 
ness; and easy-to-configure AES 256- 
bit en-cryption to secure your data 
from prying eyes. 



BounceBack Ultimate also lets users 
back up to multiple media, such as an 
external hard drive or network drive, 
simultaneously so users can have multi- 
ple concurrent backups. With synchro- 
nization capabilities enabled, users can 
save a backup of their projects on a 
backup drive and use the drive on other 
computers. When the drive is again con- 
nected to the original computer, 
BounceBack Ultimate automatically 
syncs the changes, ensuring you're 
always working with the most up-to-date 
files. Users can also schedule backups 
and create backup sets. 




CMS Products 
BounceBack Ultimate 

Full download: $89 
Full CD: $99 
Upgrade download: $69 
Upgrade CD: $79 

Lets users back up and restore the 
entire contents of a PC. 

(800) 327-5773 

www.cmsproducts.com 
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Case Study 



Even NFL Teams 
Need Protection 



Venyu's Running Backups 
Guard The Colts 

by Julie Sartain | 

The Indianapolis Colts had two prob- 
lems, according to Ryan Fannin, director of 
Football Information Systems. One, the 
group didn't have the capacity to back up 
all the data it needed in case of a disaster, 
and two, it didn't have a true off site disas- 
ter recovery solution. 

"With backup tape drives failing, it 
made sense to look into alternatives," says 
Fannin. "We considered repairing our old 
equipment and adding more storage to 
that solution, but this would have just 
been a Band- Aid, and the problem would 
have crept back up in a couple years." | 

The Colts' previous backup system, 
notes Fannin, did not include offsite 
security and automation. The process was 
manual. If it fell victim to a disaster, 
holes in the previous system could have 
possibly been revealed. The Colts needed 
a solution that would protect all of the 
organization's sensitive data, including 
ticketing, financials, statistics, and play- 
books. 

In addition, says Fannin, "We have a 
small IT staff, so time is very important. 



We needed a system that would free up our 
IT staff to concentrate on other issues 
rather than just backup tapes and equip- 
ment." 

The Colts are now using Venyu's Online 
Data Backup service (www.venyu.com) to 
implement critical pieces to its disaster 
recovery plan. "Venyu's solution allows 
for the recovery of small data losses with 
only a few clicks of the mouse," says 



to support us in planning for the future or 
in the event of an emergency." 

Suite Of Services 

Venyu, headquartered in Baton Rouge, 
La., offers a suite of services that provides 
data protection and recovery, plus it address- 
es and solves the availability challenges 
companies face when attempting to retrieve 
backup information and critical applications. 
The company's flagship service is online 
backup. Waltham, Mass., -based AmeriVault 
and Baton Rouge-based NTG merged and 
created the new company Venyu in April of 



VENYU 

YOUR DATA MADE INVINCIBLE 



Fannin. Larger volumes can be returned 
within a day on a portable disk device that 
enables reliable disk-to-disk recovery, he 
adds, and Venyu's team of technicians 
operates as an extension of the Colts' IT 
department. "They have an in-depth 
knowledge of our system and are available 



this year. AmeriVault was an early pioneer 
in online backup more than a decade ago, 
and NTG has been a data center services 
specialist for 20 years. NTG was founded by 
Venyu CEO Scott Thompson. Venyu cur- 
rently provides backup and recovery ser- 
vices for five NFL teams. 



According to Patrick Tansey, technical 
team lead at Venyu, after the software is 
downloaded (which includes the central 
administrator and the agent), the client can 
choose between two options: to have the 
agent to run as a client that seeks other 
backup targets or to place the agent on each 
server or desktop. Once the administrator 
and the client are synchronized, the system 
is configured for specific tasks, identifying 
such things as which data to back up, the 
retention schedule, and encryption levels. 

After the tasks are established for each 
server, clients can either schedule backups 
to run automatically or manually force a 
backup to run at any given time. Most 
backup data is transferred via the Internet; 
however, for larger volumes, Venyu pro- 
vides a portable disk device (called a 
Mobile Vault) to carry the data back to 
Venyu's mass storage vaults, adds Tansey. 

Tansey explains that after the first back- 
up, which garners all the initial data, only 
new and block-level changes within files 
are backed up to the redundant data storage 
vaults. These changes go through dedupli- 
cation, compression, and 256-bit AES 
encryption, resulting in a highly secure off- 
site backup in a fraction of the time that's 
required on a tape backup system. 

"Confirmation includes a digital check- 
sum, which constantly performs integrity 
verification to ensure that the selected data 
was actually processed and successfully 
received on the vault side. And an email 
verification and log report details the back- 
up activities, including exception alerts," 
says Tansey. 




Product Features 

"The online backup service is completely 
automated and stored offsite in a secure loca- 
tion," says Fannin. Data is then replicated to 



CASE Study 



To The Rescue 



DriveSavers Helps Shaw Air Force Base 
Recover Its Vital Data 



by Robyn Weisman 
• • • 

Based in South Carolina, the Shaw Air 
Force Base Civil Engineering Squadron is 
responsible for managing the infrastruc- 
ture of the base, including buildings, 
roads, and utility systems. It covers a wide 
range of disciplines that encompasses 
everything from the base's fire department 
and plumbing shops to explosive ordi- 
nance disposal, says Dean Johnson, sys- 
tems administrator for Civil Engineering 
Squadron at Shaw AFB. 

Not surprisingly, mission-critical data is 
at a premium here, and Johnson has some 
simple rules for backing up data. "If you 
think it's important, you need to back it 
up. All you've got to do is ask yourself 
the question, 'If this particular file is 
totally gone tomorrow morning with no 
recourse, what will that do to me? What 
will that do to my job?' You answer that 
question, and you'll know what to do," 
Johnson says. 

However, there are times when, despite 
all precautions and backup strategies, you 
find your data has still managed to disap- 
pear. That's what Johnson experienced last 
fall when the data from his server's 12 
SCSI drives seemed to disappear entirely, 
both on the server and on the network's 
backup tape storage system. "You can't 



imagine what my stomach felt like at that 
point," he says. 

Then Johnson learned about Novato, 
Calif., -based DriveSavers (www. drive 
saversdatarecovery.com). Founded in 1985, 
DriveSavers has saved the data of people 
and organizations ranging from NASA to 
Willie Nelson. DriveSavers has even per- 
formed such miracles as recovering all the 
data off a Mac PowerBook that spent two 
days underwater inside a cruise ship at the 
bottom of the Amazon River in Brazil. 

Johnson decided to take a chance in 
hopes that DriveSavers could recover his 
data. And, fortunately for Johnson, Drive- 
Savers did. 

Disaster Strikes 

The squadron's server in question used a 
storage system that engaged a separate con- 
troller that was about seven years old at the 
time of the incident and a separate module 
that held a total of 12 73GB SCSI drives set 
up in a RAID array. "The controller man- 
aged all those hard drives, and then the 
controller connected to the server, and the 
server shared out those unified drives as a 
shared drive for the squadron to use," 
Johnson explains. 

This particular disk array housed many 
important files — in particular, training files 
and historical files that are mandated by 



law to be kept a certain number of years. 
For example, the squadron's fire depart- 
ment had more than 500 hours of training 
files. "You're talking about 50 to 60 people 
taking X number of qualifications tests and 
so forth," says Johnson. "The completion 
and scores are on this partition, and if we 



don't have this information, there would be 
no proof, and they would have to take 
[these tests] over again." 

Johnson ran a tape library that was con- 
trolled by a system on another server in the 
same server room. This system was set up 
to back up the main rig, says Johnson. 
Because all the tape drives worked so 



smoothly, Johnson did not check them too 
often to see what they were doing. 

Then one day, Johnson saw that the 
shared drive on the main server did not 
show up for the squadron. Johnson checked 
it and rebooted the system, which seemed 
to fix the problem. But a few days later, the 
same problem occurred, and rebooting the 
system failed to fix the problem. Johnson 
tried shutting down the system and reseed- 
ing the cables, but the server was still 
AWOL. 

Although the server's controller was 
out of warranty and out of pro- 
duction, Johnson called the 
manufacturer's technical sup- 
port for advice. The technician 
asked if Johnson had tried 
using a replacement controller. 
Johnson had done so, but the 
substitute controller kept ask- 
ing if Johnson wanted to build 
a new array, which would 
have wiped out all the data on 
those SCSI drives. 

Worse, Johnson's backup 
tape library showed no record 
of backing up the rig, most 
likely because it was subject to 
the controller's malfunction. 
"Somehow it had dropped off, 
and I didn't realize it. I saw it 
working, and I just made the 
assumption that if the drives 
are working, it's backing up everything I 
had told it to back up. It wasn't," says 
Johnson. And earlier backups "were so old 
as to be useless." 




DriveSavers Saves The Day 

The support technician told Johnson 
that if he wanted to have his data restored. 
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Clients 



a remote data center at least 1,500 miles 
away, which avoids impact from regional 
disasters such as hurricanes, tornadoes, and 
earthquakes. And compliance regulations are 
not an issue because Venyu added built-in 
access controls and audit logs, plus the sys- 
tem is supported by a SAS 70 Type II audit, 
which satisfies regulatory compliance. 

Clients can schedule daily, hourly, or 
even continuous backups, "and the data 
access (which is wizard-driven) is always a 
simple click away," he adds. Management 
is centralized through one workstation, 
which can control an unlimited number of 
internal or remote servers and/or other 
workstations. Data is always encrypted 
regardless of location (onsite or in transit), 
and successful backups are confirmed via 
email notification. 

Installation is simple, the intuitive inter- 
face is easy to use, and it's all easy to man- 
age; however, "technical support is avail- 
able 24/7, if needed," notes Fannin. 
Currently, Venyu supports Windows, Unix, 
Linux, Mac, VMware, System i, Novell 
Netware, and Sun/HP UX/AIX. 

Implementation, Installation & Training 

According to Fannin, the installation and 
training were painless. "Basically, we 
allowed Venyu to remote into our server, 
and then we implemented the solution 
together. We did have a couple of installa- 
tion issues, but, luckily, Venyu' s technical 
support group was on the line with me, and 
they were able to get the problems fixed." 

For the Colts, Fannin says, this is a sig- 
nificant improvement from the former rou- 
tine of finding the right tape, loading it, and 
then searching through that tape for the 
right file, he adds. 

The service is going just as we hoped," 
says Fannin. "The backup window is 



reduced, there's little or no time needed for 
hands-on maintenance, and Venyu' s ser- 
vices give us the confidence that our sys- 
tems are not only being continually backed 
up, but that they are also safely stored off- 
site. The redundant protection of the fran- 
chise's data is what we were looking for in 
a provider." 

According to Fannin, this solution pro- 
vided the peace of mind and secure 
knowledge that the IT staff needed to 
focus on its day-to-day operations. 
Knowing that the software is proven, that 
Fannin and his team get confirmation of 
successful backups via email notifica- 
tions, and that Venyu' s technicians are 
always available handling the backup pro- 
cedure is priceless. 



Venyu Online Data 
Backup 

Offsite data backup service that lets users 
either schedule backups to run automatically 
or manually force a backup to run at any given 
time. Data can be transferred over the Internet, 
or, for larger volumes, Venyu provides a 
portable disk device called a Mobile Vault. 

"Venyu's services give us the confidence 
that our systems are not only being continu- 
ally backed up, but that they are also safely 
stored offsite. The redundant protection of 
the franchise's data is what we were looking 
for in a provider," says Ryan Fannin, direc- 
tor of Football Information Systems for the 
Indianapolis Colts. 

(866) 978-3698 
www.venyu.com 



he would need to send it to a drive recov- 
ery specialist. The technician recommend- 
ed DriveSavers and gave Johnson the 
company's phone number and Web site 
address. "So I called [DriveSavers] up 
and told them the long sad story, and they 
said, 'Yeah, we'll take a swing at it,'" 
says Johnson. 

Johnson sent the entire rig, which 
weighed 80 pounds and required a spe- 
cially built shipping crate, to Drive- 
Savers' facilities in California. Because 
the rig was formatted in a RAID array, 
DriveSavers needed to pull all of the 
SCSI drives out of the enclosure and build 
an SCSI cable that could link all the 
drives in different combinations until 
DriveSavers technicians succeeded in re- 
creating the original array. 

"You can have hundreds of combinations 
with 12 drives, but they figured it out and 
were able to see the data onboard," says 
Johnson. "They didn't tell me the propri- 
etary process that brought those drives back 
to life, [but] they were probably wearing 
pointed hats and waving the wands over 
stuff, from what I can tell." 

Johnson gives DriveSavers' customer 
and technical support high marks. "They 
were great. One of their engineers ramrod- 
ded this particular recovery, and he was 
really nice and filled me in every step of 
the way. The gal at the front desk got to 
know my name real quick and hooked me 
up with whatever engineer was working on 
my drives," Johnson says. 

Once Johnson's data was restored, 
DriveSavers engineers and Johnson com- 
pared schematic layouts, and Johnson was 
able to tell them the exact five folders 
(which totaled about 45 GB) he needed to 
have salvaged. "Suffice to say, the $15,000 



cost for this recovery at DriveSavers was 
worth every penny," Johnson says. 

When they were finished, DriveSavers' 
staff shipped the original disks back along 
with what Johnson calls "an almost armor- 
plated" 350GB external USB drive with the 
data Johnson needed. 

"That drive is still sitting on my desktop 
in case anything should happen. We built a 
new server and copied this stuff on it, and 
now it's running, and everybody lives hap- 
pily ever after," Johnson says. 



DriveSavers Data 
Recovery Services 

A drive recovery service that employs more 
than 75 professionals to retrieve data from 
damaged and compromised storage media of 
all types, from removable media to high- 
capacity RAID, NAS, SAN, tape, and multi- 
disk servers. The company has close, long- 
term relationships with leading hard drive 
manufacturers to keep pace with changes in 
storage technology. 

"You can have hundreds of combinations with 
12 drives, but [DriveSavers] figured it out and 
were able to see the data onboard. They didn't 
tell me the proprietary process that brought 
those drives back to life, [but] they were prob- 
ably wearing pointed hats and waving the 
wands over stuff, from what I can tell," says 
Dean Johnson, systems administrator for 
Civil Engineering Squadron at Shaw Air 
Force Base. 

(800) 440-1904 
www.drivesaversdatarecovery.com 



dtSearch 



Instantly Searehf 
Terabytes ofText 



dtSearch products have received 
hundreds of excellent press reviews. 

The dtSearch Web site also has 
hundreds of developer case studies 
posted at www.dtsearch.com. 



dtSearch Version 7.6 releases cover both 
developer products, with new expanded sample 
code for use with Microsoft's most recent Visual 
Studio version, and enterprise products, with 
updates to the user interface. 

(800) 483-4637 (800-IT-FINDS ) 

www.dtsearch.com 



The Smart Choice For Text Retrieval® Gets Better 

dtSearch Version 7.6 Releases 
Extend 64-Bit Capabilities In Enterprise, 
Developer Products 



dtSearch, a leading supplier of enterprise and 
developer text retrieval software, has extend- 
ed its 64-bit product line. The new release 
covers both dtSearch's enterprise and devel- 
oper products, including native 64-bit versions. 
For the developer products, the new release 
provides expanded sample code for use with 
Microsoft's most recent Visual Studio version. 
For the enterprise products, the new release 
updates the user interface, providing a greater 
selection of "look and feel" options for users. 

The Version 7.6 release includes: 
dtSearch Desktop with Spider, which instant- 
ly searches files on a PC, and dtSearch 
Network with Spider, which searches across 
a network. Both instantly search and display, 
with highlighted hits, a variety of file types, 
including email messages along with the full 
text of email attachments. Through the Spider, 
both applications can also add Web content to 
a local or network search. 

dtSearch Web with Spider quickly publishes 
a large volume of instantly searchable data to 
an IIS Internet or intranet site. dtSearch Web 
works as a point-and-click solution, with no 
programming required. The Spider provides 
integrated support for local and remote Web 
site data. 

dtSearch Publish lets users easily publish 
instantly searchable document collections or 
Web site content to portable media such as 
CDs, DVDs, and external hard drives. 

The dtSearch Engine lets developers add 
dtSearch functionality to 32-bit and 64-bit appli- 
cations. The dtSearch Engine for Win & .NET 
supports C++, Java and .NET, including a .NET 
Spider API. The new release provides expand- 
ed sample code for use with Microsoft's most 
recent Visual Studio version. The dtSearch 
Engine for Linux supports C++ and Java. 

The dtSearch product line features: 
Terabyte Indexer. dtSearch products can 
index more than a terabyte of text in a single 
index. They can also create and simultane- 
ously search an unlimited number of indexes. 
Indexed search time is typically less than a 
second, even across terabytes of data. 

File formats and databases. dtSearch prod- 
ucts include integrated file parsers and 



converters for a wide range of popular file 
types. dtSearch products display existing 
Web-ready content (HTML, PDF, XSL/XML, 
etc.) with highlighted hits, and with all images, 
links, and formatting intact. For other file 
types, such as MS Office, OpenOffice, and 
ZIP, built-in proprietary converters render 
these document types as HTML, with high- 
lighted hits, for display in a Web browser. The 
dtSearch Engine includes a data source API 
for indexing SQL-type databases and other 
non-file data, including BLOB data. 

Spider. The dtSearch Spider adds local or 
remote Web site content to a searchable data 
collection. The Spider supports public sites, 
intranets, HTTPS, password-accessible sites, 
and forms-based authentication sites. The 
Spider supports both static and dynamic Web- 
based content, including ASP.NET, PHP, MS 
CMS, and SharePoint, indexing to any level of 
vertical or horizontal depth. dtSearch products 
support integrated searches of local and 
remote content, including WYSIWYG hit high- 
lighted display of Web-ready data. 

Search features. Full-text and fielded data 
search options include: distributed or federat- 
ed search options with integrated hit-highlight- 
ed display, fuzziness adjustable from to 10 
(to sift through typographical and spelling 
errors), synonym/concept/thesaurus (through 
a built-in thesaurus and/or user-defined syn- 
onym rings). Boolean (and/or/not), phrase, 
phonic, wildcard, bilateral proximity, directed 
proximity, stemming, natural language/vector- 
space relevancy ranking, variable term 
weighting, positional scoring, field-based rele- 
vancy ranking, data classification and filtering 
objects, numeric range searching, advanced 
date recognition, unindexed search (in addi- 
tion to indexed search), and special forensics 
search options (text filtering of forensically- 
recovered data, credit card search, email 
search, etc.). 

International language support. Built-in 
Unicode support covers hundreds of interna- 
tional languages (including right-to-left lan- 
guages and Chinese/Japanese/Korean char- 
acter processing options). 



www.dtsearch.com 
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Top Consumer Trends To Watch 

Which consumer technologies and trends 
are making their way to your enterprise? 
We talked with experts to come up with 
some strategies for making the most of 
them and perhaps even using them to 
your advantage. 
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Netbooks 

Bridge The Gap | 24 

■ Like countless consumer devices 
before them, netbooks are seeping 
into the enterprise space as employ- 
ees tote them from home to work 
and back. 



Getting The Word Out | 25 

■ There are many different social 
networking sites in the market today. 
Some are geared toward enterprises, 
while others are intended more for 
friends and family as a way to stay 
in touch. 



Personal Smartphones 
In The Enterprise | 26 

■ The productivity to be gained from 
smartphone use in the enterprise is 
unmistakable, but the hazards have 
gone largely unnoticed at many 
companies. 



Data On The Move | 27 

■ Although laptops have held the top 
spot in portable device risks, devices 
a fraction of their size with similar 
storage capacity are gaining ground. 



Netbooks Bridge 
The Gap 



These Diminutive Devices Pack Little Punch But 
Potentially Serve Useful Roles In Corporate Realms 



by Christian Perry 

Like countless consumer devices before 
them, netbooks are seeping into the enter- 
prise space as employees tote them from 
home to work and back. But whereas full- 
fledged notebooks earned their place in 



Key Points 



Although underpowered and undersized 
compared to full-fledged notebooks, net- 
books can find homes in organizations 
where cloud computing or mobile needs 
exist. 

Netbook implementation should mirror 
that of other mobile devices, but users 
also have a responsibility to determine 
whether a netbook is the proper device 
for their needs. 

Because netbooks are just as capable 
of compromising company data as more 
powerful computers, IT managers must 
approach the devices with the same 
security precautions. 



enterprises long ago, netbooks remain clas- 
sified as consumers-only by many IT per- 
sonnel, who see the devices as little more 
than glorified smartphones. Still, the net- 
book trend is growing stronger and forcing 
data center and IT managers to gauge their 
worth in the enterprise. 

"We can already see from the adoption of 
smartphones like the iPhone that personal 



devices are making their way into the en- 
terprise in people's pockets, so there's 
no reason to think netbooks 
might not arrive in their small 
bags," says Matthew Cooke, 
senior product marketing 
manager at iPass (www.ipass 
.com). "The portability of a 
netbook makes it perfect for 
the regularly mobile individ- 
ual who wants access to a 
full email client, a rich Web 
browsing experience, and 
light office applications." 

Cooke explains that a 
smartphone might suffice for 
some users, but for others 
looking for more power, a 
desktop application experi- 
ence, or simply a QWERTY 
keyboard, netbooks can 
prove to be alluring. In turn, 
organizations are bound to 
recognize that allure and 
subsequently equip employ- 
ees with mobile devices that 
suit their activities, rather 
than doling out a one-size- 
fits-all notebook. 

Gems In Certain Rough 

With even wireless pro- 
viders offering netbooks with 
their data plans, the average 
small or midsized enterprise is bound to 
have employees carting the devices to 
work. Yet regardless of how netbooks are 



Biggest Issue To Consider: Security 



The lightweight, mobile 
nature of netbooks makes 
them a perfect candidate to 
fly under the radar at organi- 
zations. But although they 
don't share the processing 
performance of notebooks 
and desktops, netbooks cer- 
tainly have the comparable 
capability of accessing com- 
pany data. Anthony James, 
vice president of products for 
Fortinet (www.fortinet.com), 
stresses that enterprises 
should apply similar best 
practices used with other 
mobile devices when dealing 
with netbook adoption. 



"Employees will view the net- 
book as a more personal com- 
munication device and likely 
use it for everything from offi- 
cial business use to shopping 
to Web surfing and beyond. So 
the netbook will become sus- 
ceptible to the threats any nor- 
mal PC would. Employees 
would compromise sensitive 
data that exists on the netbook 
if files are stored [in a nonen- 
crypted manner] or if security 
safeguards are not also in- 
stalled," James says. 

He recommends deploying 
antivirus, encryption, data 



leakage prevention, and fire- 
wallA/PN technologies on net- 
books to prevent security 
issues caused by lost or stolen 
devices or the mixed (personal 
and business) use that's likely 
to occur. Matthew Cooke, 
senior product marketing man- 
ager at iPass (www.ipass.com), 
adds that acceptable use and 
data security policies may need 
to be developed and shared 
with users because enterprise 
data residing on netbooks 
entails corporate responsibility, 
regardless of whether the de- 
vices are employee- or com- 
pany-owned. 



entering the enterprise, there appears to be 
legitimate uses for the devices under cer- 
tain circumstances. James Brehm, comput- 
ing analyst in the mobile and wireless 
research practice at Frost & Sullivan, 
notes that enterprises using Web-based 




programs and similar cloud applications 
require less processing capability from 
local machines. 

"In this instance, netbooks are a good, 
almost perfect solution. Second, for jobs 
that don't require a lot of mathematical 
computations [or] database or spreadsheet 
activity, netbooks are a fine solution. Third, 
because of the price point, netbooks are 
almost a disposable solution when com- 
pared to ruggedized or semi-rugged note- 
books," Brehm says. 

Many companies have adopted a BYOC 
(bring your own computer) policy, explains 
John Alston, president and CEO of Club- 
Drive Systems (www.clubdrive.com). 
Under such policies, workers choose com- 
puting devices that are most appropriate for 
their work, in turn allowing them to select 
the size, color, speed, storage space, and 
other factors of the devices. These policies, 
along with the increased presence of cloud 
applications, are lending more viability to 
the netbook platform. 

However, there's an ironic twist to net- 
books when it comes to their existence in 



the corporate realm, according to Kurt 
Moody, a senior manager in Citrix's 
XenApp product group (www.citrix.com). 
"The most compelling thing about these 
devices, at least for the majority of con- 
sumers, is their light weight and small 
form factor," he says. "From an end- 
user perspective, as a 'simple' Internet 
access device, this can be quite com- 
pelling, but as a business user, the form 
factor becomes an ergonomic compro- 
mise, especially for knowledge workers 
and content creators." 

Into The Fold 

Challenges do exist for SMEs consider- 
ing implementing netbooks, but they're 
relatively similar to chal- 
lenges inherent with other 
mobile technologies. Cooke 
explains that company- 
issued notebooks shouldn't 
pose much trouble because 
they'll be treated as another 
corporate asset, but employ- 
ees bringing in their own 
netbooks will force IT 
departments to establish 
new support relationships 
with users to provide them 
with the ability to connect to 
basic services such as email. 

"Supporting the hardware 
and device functions on per- 
sonal devices will be diffi- 
cult, so the users will also 
have to take a certain 
amount of responsibility for 
their own device and consid- 
er if they are technically 
astute enough to take that 
on," Cooke says. "It may be 
more suitable for some 
[employees] to solely use 
corporate-owned and sup- 
ported devices." 

Brehm adds that although 
netbook planning and testing 
is no different from the prac- 
tices required for traditional notebooks, IT 
policies need to account for the highly 
"connected ability" of netbooks. Moreover, 
IT teams need to be aware that some net- 
books run obscure Linux versions that 
might have compatibility issues with inter- 
nal corporate software, he says. 

Looking Ahead 

According to Brehm, PC manufacturers 
coined the term "netbook" to differentiate 
higher-priced notebooks from lower-cost, 
lower-power netbook computers that hit 
the market in 2007. He adds that most 
consumers don't need more power than 
what a netbook provides for emailing, 
surfing the Web, and sending photos. But 
Web-based environments (such as the 
classroom) are also a good fit, as are 
enterprises where beefier machines aren't 
required. Frost & Sullivan predicts that 
the netbook market will outpace the note- 
book in terms of growth for the next sev- 
eral years, cementing the notion that mul- 
tiple form factors can serve to fulfill 
client needs. 
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Getting The Word Out 



Social Networking Offers New Avenues 
For SMEs But Can Also Pose Risks 



by Drew Robb 
• • • 

Savvy enterprises are posting blogs, 
chatting on Twitter, and harnessing other 
interactive media to get their messages out. 
Big IT firms such as Microsoft, EMC, and 
Google are widely utilizing these tools, and 



Key Points 



When used properly, social networking can 
be a powerful tool for SMEs; however, it's 
important to know what's out there and to 
be aware of the risks involved. 
Adhering to security best practices is para- 
mount when social networks come into play. 
Establish usage guidelines for employees 
to protect against lost productivity. 



the old guard in more established industries 
is starting to follow their lead. 

"SMEs need to understand that the real- 
time Web tools available today should be 
part of their PR and marketing strategies 
because they complement traditional meth- 
ods and they reach an audience that maybe 
would have not heard about them other- 
wise," says Georgiana Comsa, managing 
partner at Silicon Valley PR (www. silicon 
valleypr.com), an agency that represents 
SMEs in the high-tech sector. 

However, social networking venues can 
also present problems to IT when it comes to 
securing sensitive information and locking 



down networks. Here is a look at what social 
networking means to both business and IT. 

Social Networking 101 

There are many different social network- 
ing sites in the market today. Some are 
geared toward enterprises, while others are 
intended more for friends and family as a 
way to stay in touch. 

"Consumer/enterprise adoption increases 
every day, as more information about social 
media becomes available and 
people understand it better," 
says Comsa. "But many com- 
panies are still trying to figure 
it out, and others claim they 
don't understand social media." 

Given the proliferation of 
social networking sites, it's 
important for SMEs to know 
what's out there, what groups 
the different avenues are geared 
toward, and what kinds of inter- 
actions are taking place in each. 

MySpace and Facebook, for 
example, are both heavily pop- 
ulated by the younger genera- 
tion and provide a way to com- 
municate with friends, locate 
old acquaintances and business 
contacts, post video content 
and messages, and invite peo- 
ple to functions. 

Twitter allows users to post 
short, 140-character messages. 
With Twitter, you can "follow" 



your contacts, meaning anytime they post 
a new message, you can read it from 
your account. 

YouTube hosts short videos about nearly 
anything under the sun, from business pro- 
posals to singing phenomena and celebrity 
sightings. And then there are several busi- 
ness-oriented sites aimed more at profes- 
sionals, such as Linkedin, Socialcast, 
Socialtext, and Huddle. 

IVIaintaining Security & Control 

Each type of social media has its own 
niche, and each presents its own set of wor- 
ries for IT, from the casual Twitter message 




facebook 
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that accidentally lets loose company informa- 
tion to the video on YouTube that offers a 
glimpse of a top-secret software project. 
There's also the increased chance of con- 
tracting malware from infected messages. 

Another concern is that of employees 
posting faulty or sensitive information, 
which can hurt credibility. "Posting incorrect 
information can damage relationships or 
even reputations," says Comsa. "In addition, 
pushing your marketing messages too often 
in an ad-like way could have the opposite 
effect and turn people off instead of getting 
them interested in the product or service." 

With all of the potential risks social net- 
works present, then, it is important to lay out 
usage guidelines to prevent mishaps and to 
apply security best practices to any and all 
social media interactions, such as ensuring 
that antivirus and antispyware software are 
fully up-to-date. Educate users that these 
sites are wide-open and are a 
primary channel of threats into 
the enterprise. If security tools 
can be turned off at the desktop 
level, caution users about the 
perils of such an action. 

Additionally, for enterprises 
that choose to forgo publicly 
available social networking 
sites altogether — as well as 
the issues that come with 
them — there are secure ways 
of creating and deploying an 
enterprise's own social net- 
work that involve almost no 
burden on IT yet include the 
necessary security and control 
safeguards. 

"Social networking software 
is available for SMEs at low 
cost and can be deployed via 
SaaS or appliances," says 
Ross Mayfield, president and 
co-founder of Socialtext. 
Go to Page 26 
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Personal Smartphones 
In The Enterprise 



Where Do Non-Corporate-Issued Gadgets 
Fit Into Network & Security Plans? 



by Holly Dolezalek 
• • • 

BlackBerrys, iPhones, Windows Mobile 
phones, and other smartphones are becom- 
ing more common all the time. Employees 
are using them to check their work email, 



Key Points 



• You can try to prohibit non-corporate- 
issued smartphones from accessing the 
network, but you might be better off allow- 
ing them and working with employees to 
make sure that all phones that access the 
network are secured. 

• Smartphones are as powerful as the first 
laptops, and the same security concerns 
apply when allowing them to access the 
network: Make sure they're password- 
protected; their data is encrypted; and 
they're protected from viruses, malware, 
spyware, and snoopware. 

• Just because you allow smartphones to 
access the network doesn't mean you have 
to allow them to access all of it. 



to browse the Internet, to access the compa- 
ny network, to use applications, and for 
other work functions. 

The productivity to be gained from this is 
unmistakable, but the hazards have gone 
largely unnoticed at many companies. Until 
now, some companies that were aware man- 
aged the problem by issuing smartphones to 
employees so that IT departments had con- 
trol over how they were configured and used. 

But not every company can afford that 
kind of control anymore. In fact, some com- 
panies are cutting costs by refusing to pro- 
vide work phones at all. So how should an 
enterprise handle the growing use of all these 
phones, not issued by the company, that are 
connecting to the company's network? 



Mounting Security Concerns 

Symantec estimates that there are half a 
billion smartphones in use today, and in a 
few years, there will be more than the esti- 
mated billion PCs in use. Khoi Nguyen, 
group product manager for the Mobile 
Security Group at Symantec (www.symantec 
.com), says that the smartphone segment of 
the cell phone market is growing phenome- 
nally; last year, the number of smartphones 
grew by 22%, compared to 7% in the ordi- 
nary cell phone market. 

These devices make a fine avenue right 
into the heart of the company, 
but they aren't being appro- 
priately secured. "Surveys 
conducted by Symantec indi- 
cate that 80% of companies 
allow smartphones to access 
the network and store data, 
[and] less than 25% of them 
do anything to secure them," 
Nguyen says. 

Additionally, hackers have 
realized that this is a big play- 
ground with no monitors, and 
they're beginning to target 
smartphones. Spyware and 
snoopware, the next generation 
of spyware that specifically 
targets smartphones, let hack- 
ers track the keystrokes and 
Web sites that smartphones are 
using, and the more devious 
forms of this software can let 
them activate the phone's 
microphone, camera, or video 
camera so that the hacker can 
monitor the user's conversa- 
tions or even sneak pictures or 
video of the user's environment. 

Worse, those same hackers could get 
access to databases, applications, and other 
stored information anywhere on the company 



network once a zombie smartphone is used 
to access the network. And even ordinary 
viruses, once accidentally downloaded by the 
smartphone or through attachments to text 
messages, can merrily trot from the phone to 
the network. "A phone is like a flash drive," 
says Chris DeHerrera, mobility architect for 
Enterprise Mobile in Watertown, Mass. 
(www.enterprisemobile.com). "It can store 
either good information or bad, and although 
it doesn't get infected itself, it provides the 
transmission route for the network to get 
infected." 

If You Can't Beat Them, Join Them 

Some companies are getting around these 
problems by allowing only phones that were 
issued by the company to access the network. 




Biggest Issue To Consider: 
.Employees' Security Measures 


Smartphones need the same 
kind of protection that PCs and 
laptops need from viruses, 
spyware, snoopware, and 
other threats, but it can be dif- 
ficult to manage devices that 
are not corporate-issued, so 
employee cooperation is key. 
Ask employees to keep their 
phones safe by: 


• Password-protecting their 
phones at startup. 

• Encrypting their data. 

• Avoiding storing passwords 
on the smartphone. For 
example, if they use an 
Internet-based email 
account or banking appli- 
cations, remind them 

they should uncheck any 


"remember me" boxes, as 
that will allow a hacker to 
capture the password or 
someone who finds it to 
access the account easily. 
• Being careful of Bluetooth 
settings. They should dis- 
able the broadcast mode 
and encrypt their Bluetooth 
transmissions. 



But there are two things wrong with that 
plan. One is simply that it will annoy 
employees who want to be more productive. 

The other is that they're likely to find 
ways to go around you. "No matter how 
hard you try to forbid it, employees want to 
work with mobile devices," says Rene Poot, 
international systems engineer for NCP 
Engineering in Nuremberg, Germany 
(www.ncp-e.com). "It's similar to wireless 
technology a few years ago, when people 
used it despite companies' concerns about 
security. Eventually, companies decided that 
its usefulness outweighed the security risks." 

When your choices are to limit productivi- 
ty or to let yourself be vulnerable to rogue 
users who circumvent your security require- 
ments, it makes more sense to partner with 
employees who want to use their own smart- 
phones on your network. Like most tech 
issues, this is more of a people problem, and 
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you can solve it by educating users about the 
security threats their phones pose. "You 
need to make them aware that as soon as 
they start using their phone for work purpos- 
es, losing that phone becomes a major 
potential security breach for the company," 
says Hal Steger, vice president of marketing 
for Funambol (www.funambol.com). "They 
need to understand that it's like losing a 
company credit card or the keys to the 
office." They also need to understand that 
losing a smartphone that has connected to 
the network is just as bad as losing a laptop. 

Protect Your Network 

There are other steps you can take to make 
sure that non-corporate-issued smartphones 
don't pose a threat to your company network. 

Security software. Part of that education 
can be asking or requiring employees who 
use their smartphones to access the network 
to use security software on that phone. 
Security suites provide features such as 
encryption, antivirus, firewalls, and other 
essential protections. Some can even be set up 
so that phones are required to have a firewall 
active before they can connect to the network. 
"It's like a device pat-down," Poot says. "If 
you don't comply with securi- 
ty requirements, you can't 
proceed, just like passing 
through TSA at the airport." 

Password protection. 
Most smartphones and their 
operating systems have the 
ability to set up the phone 
to be password-protected. 
Again, this is something you 
can either suggest strongly or 
outright require. "It doesn't 
fully protect the phone, 
because a more technically 
advanced person can crack 
open the phone to read the 
memory directly from the 
memory card," Nguyen says. 
"For that reason, you need to 
pair password protection with 
encryption, which sometimes 
comes built into the phone 
and sometimes requires third- 
party software." That means 
not only data that streams 
back and forth between 
phone and network but also 
data that is stored on the phone, which not 
all phones are able to do. 

Enable remote wiping. If a user loses his 
or her phone, remote wiping allows the data 
on that phone to be erased from the office. 

Disable unnecessary features. "Security 
is inversely related to functionality, which 
means that the more features on the phone, 
the more risks there are," Nguyen says. For 
example, you can require users with 
Bluetooth to disable the broadcast mode so 
that others can't discover and attack that 
phone via Bluetooth. 

Give smartphones only partial access. 
You don't have to allow phones free-range 
access to the network. Set policies so that 
certain databases, applications, or docu- 
ments cannot be accessed by phone. That 
way, even if an employee loses his or her 
phone, only a limited part of the network 
will potentially be in harm's way. 



Biggest Issue To Consider: 
.Potential Loss Of Productivity 



Getting The Word Out 



Continued from Page 25 

Move Forward, But Tread Carefully 

However you go about it, sites such as 
Facebook and Twitter make it possible to 
raise awareness about your company 
faster and more effectively than ever — if 
used wisely. 

"It is important that SMEs and execu- 
tives participate in social media activities to 
help increase visibility and customer per- 
ception about their products and services," 
says Comsa. "It is proactive, it is fast, and 



with the right implementation, it should tar- 
get people in their industry: partners, poten- 
tial and current clients, investors, media, 
and analysts." 

On the other hand, it can be time-consum- 
ing and may require designating an employ- 
ee to handle the social media efforts or 
handing the reins over to a PR agency, par- 
ticularly once your efforts gain steam. No 
matter how you proceed, one thing is cer- 
tain: It's imperative to plan your approach 
carefully and cover all the bases before div- 
ing head-first into social networking. 



Social networking sites such as Twitter and 
Facebook have definite potential for interacting 
with customers; however, they also serve as 
a very tempting distraction for employees. 
Although it may seem harmless for an employ- 
ee to respond to his Facebook messages or 
post a tweet about what he had for lunch, these 
small blips of activity can quickly add up to 
hours of lost productivity. In fact, according to 
a recent survey of 237 enterprise employees 



conducted by Nucleus Research, companies 
whose users access Facebook during business 
hours experience a drop in productivity of 1 .5% 
on average. 

With this in mind, SMEs should consider regu- 
lating employee use of social networking media, 
such as establishing guidelines as to which 
sites can be accessed during business hours or 
restricting usage to business-related tasks only. 
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News 



There Are Many Things To Keep In Mind 

As Portable Storage Devices Proliferate In SMEs 



by Sandra Kay Miller 

A GROUP OF DATA CENTER managers once 
played a simple game: empty their pockets 
to see how much mobile storage each was 
carrying. Between thumb drives, an iPod, 
and a smartphone, one manager had more 
than 500GB of storage space in his pockets. 
All agreed that readily available portable 
storage devices posed the single largest 
threat to their organizations today. 

Although laptops have held the top spot 
in portable device risks, devices a fraction 
of their size with similar storage capacity 
are gaining ground. "It's much easier to 
lose a flash drive than a laptop," says John 
Girard, vice president and distinguished 
analyst for Gartner's Info Security and 
Privacy Research Center. Given the 
chances for losing a flash drive with sensi- 
tive data or for using the drives for more 
nefarious actions such as downloading con- 
fidential information to a personal mobile 
device, the No. 1 trend in portable storage 
devices can be summed up in 
one word: security. 

Securing Portable Storage 
Devices 

According to Gary Streuter, 
vice president of marketing 
for CMS Products (800/ 
327-5773; www.cmsproducts 
.com), "It's really a two- 
edged sword." Whether it's 
the "sneaker-net" of the earli- 
er technologies, such as flop- 
py disks and CDs, or the 
use of today's ubiquitous 
portable flash drives and hard 
drives to transfer data from 
one physical location to 
another, the prevalence of 
portable storage means that 
data still has the ability to 
wander out the door. 

Although there has been a 
push to centralize everything 
from file storage to backups 
in the enterprise, many com- 
panies still heavily rely on 
the use of portable storage devices. "The 
organizations who are allowing portable 
storage devices are the ones driving a very 
strong need for encryption. Encryption for 
portable storage devices has become 
extremely important in the enterprise 
space," says Streuter, who points to even 
well-intentioned employees who acciden- 
tally lose portable storage devices. 

There are a number of commercial solu- 
tions with the ability to automatically 
enforce encryption on portable devices, 
often completely transparent to the end 
user. This type of technology has become 



critical in maintaining regulatory compli- 
ance in enterprises that routinely store pri- 
vate data on portable storage devices. "If 
someone else finds a lost flash drive and it 
turns out there were medical records on it, 
well, there's huge penalties for that today," 
Streuter warns. 

Similarly, device control technologies, 
sometimes referred to as port sealers, are 
gaining traction in enterprises with a need 
to control portable devices attaching to cor- 
porate machines and, ultimately, the net- 
work. "The market for mobile data protec- 
tion solutions has been steadily increasing 
since 2002," says Gartner's Girard. 

Although education and written policies 
are the first line of defense against portable 
storage devices, the reality is that users are 
still going to plug them into their corporate 
machines. In a recent survey by the 
Ponemon Institute, the privacy and informa- 
tion management research firm found that 
most respondents admitted to not complying 
with their companies' security policies. 



Additionally, 69% admitted to copying con- 
fidential data onto USB drives, and 43% 
have lost or misplaced portable storage 
devices containing corporate data. 

"The problem is that anyone can [pro- 
vide] their own thumb drive to plug in. 
Most of the time, their intentions are 
good — they couldn't find the company's 
device so they provided their own. A lot of 
times, it's not an ulterior motive — employ- 
ees are simply trying to get their job done. 
That's not a bad thing until they lose the 
device and then they expose the company 
to potential penalties," says Streuter. 



Biggest Issue To Consider: 
Allowing Personal Device Access 



Thumb drives, iPods and 
MPS players, PDAs, and 
smartphones have become 
pervasive both professional- 
ly and personally. However, 
the lines often blur when it 
comes to plugging these digi- 
tal devices into enterprise- 
owned machines. 

Allowing personal devices can 
expose organizations to a 



variety of hazards. Loss and 
theft of information and virus 
infection are two of the most 
prominent issues, but compa- 
nies can also be held liable 
for illegal downloads, such as 
bootlegged music files and 
pornography, through the cor- 
porate network. 

However, prohibiting the use 
of personal devices can also 



hamper productivity for em- 
ployees who take work home 
or work from the road. To 
monitor and control the use of 
non-company-owned portable 
storage devices, then, SMEs 
interested in allowing these 
devices should look into secu- 
rity solutions that can reduce 
an organization's risk and help 
ensure requisites for regulato- 
ry compliance. 



By deploying centralized control solu- 
tions, IT staff can easily create and apply 
granular policies for portable device types 
and classes, ports, connections, machines, 
and users. Device control solutions also rou- 
tinely include the ability to enforce automat- 
ed encryption on portable storage devices as 



Key Points 



Employees routinely copy private and con- 
fidential data to portable storage devices 
even if there is a written policy prohibiting 
the practice. 

Organizations are turning to encryption and 
centralized device control solutions to 
thwart data loss and theft through portable 
storage devices. 

Organizations are also choosing to com- 
pletely prohibit portable storage devices 
from attaching to corporate machines. 




well as shadow and record a snapshot of all 
information being transferred to and from 
the device or port. 

"This software has become quite sophisti- 
cated in terms of giving the 
IT group centralized control 
over what has access to their 
network through machine 
ports," says Streuter. 

Locked Out 

For organizations such as 
portions of the federal govern- 
ment or those bound by strin- 
gent regulatory compliance, 
the choice is being made to 
/ completely prohibit the use of 

I portable storage devices. 

I "That came about because 

\ they were finding portable 

storage devices in the ba- 
zaars in Afghanistan with all 
kinds of American data — not 
because someone sold out, 
but because they were either 
stolen or lost," says Streuter. 

Another serious threat that 
led the Department of De- 
fense to ban the use of port- 
able devices attaching to their 
networks was malware. USB 
drives have become popular targets for mali- 
cious code writers to use as secondary media 
for spreading infections. 

A common misconception about encrypt- 
ed portable storage devices is that if they 
are encrypted, they are not subject to virus 
infection. Encryption only protects against 
data loss or theft. Once the doors of encryp- 
tion are opened on portable devices, mali- 
cious code is able to seat itself on the drive 
and reside safely until access to the device 
is decrypted. In this day and age of zero- 
day exploits, some organizations cannot 
afford to take that chance. 

Unfortunately, this severe route can have 
negative consequences. "Just sealing off 
everything takes away a level of efficiency 
that people have to do their jobs," says 
Streuter. 

As the capacity of portable storage 
devices increases and the physical size 
decreases, their convenience will continue 
to fuel the demand for their use in both 
professional and personal instances. 
Enterprises can protect themselves against 
threats from portable storage devices 
through a combination of measures while 
still encouraging productivity by making 
use of all security features (passwords and 
encryption) integrated with the devices 
and keeping network security measures 
(firewall, antivirus, antispyware, IDS/IPS) 
up-to-date. 



I Government IT Spending To Grow 

According to analysis and consulting firm 
Input, U.S. government IT spending is pro- 
jected to grow to $90 billion in 2014, up from 
$76 billion this year. Cloud computing and 
cybersecurity are expected to be high-growth 
areas. Cloud computing spending will grow 
by 27% to more than $1 billion, while spend- 
ing on cybersecurity will grow at a compound 
annual growth rate of more than 8% from 
$8.2 billion this year to $1 2.2 billion in 201 4. 
Deniece Peterson, manager of industry 
analysis at Input, says the Obama adminis- 
tration is pushing cloud computing, health IT, 
and smart-grid spending now in order to save 
IT money later. 




I Bing Makes Progress— Sort Of 

According to month-to-month figures from 
Web analytics company Hitwise, Microsoft's 
new search engine Bing saw its search 
engine market share drop from 5.64% in 
May to 5.25% in June. However, for June, 
Bing had an average growth rate of 25% per 
week, starting the month with a 4.3% share 
and ending it with a 6.71% share. Google 
still dominates the market, according to 
Hitwise, ending June with a 74.04% share, 
up more than 4% from a year ago. Microsoft 
made a post on Bing.com saying, "We saw 
8% growth in unique users to Bing.com in 
June, which is an important indicator that 
you are trying Bing and the word is spread- 
ing. Based on our own polling, we have 
also seen the number of people 'likely to 
recommend' Bing double in our debut 
month." Yahoo! claimed a 16.19% share 
for June, according to Hitwise, down from 
19.62% a year ago, while Ask.com dropped 
to a 3.15% share from 4.05% last year. 

I Intel Helping With Google Chrome OS 

An Intel spokesman says the company is 
working with Google on the Chrome operat- 
ing system and has been aware of the project 
for some time. Intel's support gives Google 
some backing because the majority of the 
world's computers contain Intel processors. 
The upcoming operating system is geared 
toward heavy Internet users on desktops, 
notebooks, and netbooks, and some specu- 
late that this could create an awkward rela- 
tionship between Intel and Microsoft be- 
cause of Microsoft and Google's rivalry. 

I Few To Deploy Windows 7 This Year 

Six out of 10 companies have no plans at 
this point to incorporate Windows 7, accord- 
ing to a recent survey administered by 
Quest Software's ScriptLogic. The survey, 
which compiled feedback from 1 ,000 IT 
administrators, found 34% will likely deploy 
the new Windows operating system by the 
end of 2010, but only 5.4% will deploy it by 
the end of this year. Windows 7 is set to be 
released in October. Lack of time and re- 
sources were the top reasons for not deploy- 
ing Windows 7 earlier, followed by applica- 
tion compatibility concerns. 
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I Six Quick Tips ~| 



Identify The Top Web 
Threats To Your Enterprise 



Keep Networks Safe From SQL Injection 
Attacks & Unknown Users 



by Robyn Wei smart 

Most organizations no longer have a 
strict divide between their network and the 
Web, and as a result, many of the biggest 
SME security threats have a Web-based 
component. Below is a collection of some 
of the biggest Web-based threats out there. 



I along with some tips on how to combat 
them. 

Defend Against Cross-Site Scripting 

XSS (cross-site scripting) attacks are a top 
Web threat, says Ralph DeFrangesco, a secu- 
rity expert and adjunct professor in computer 
security at Drexel University. In an XSS 



BONUS TIPS 



■ Watch for false security 
padlocks. Remind your 
employees that a padlock icon 
on a Web site does not guar- 
antee the page is secure. 
"Cyberthieves are capable of 
providing a padlock graphic, 
creating the illusion that the 
site is secure," says Fred 
Touchette, senior security 
analyst at hosted solu- 
tions provider AppRiver 
(www.appriver.com). As part 
of your security policies, make 
sure your employees double- 
click on these padlocks to dis- 



play the certificate information 
guaranteeing they are on safe, 
secure Web sites— and that 
the issued certificate matches 
the company they are visiting. 

■ Inspect encrypted Web 

traffic. Traditionally, enterpris- 
es have relied on firewalls and 
UTM devices to monitor Web 
traffic, but encrypted Web traf- 
fic provides attackers with a 
means to bypass these securi- 
ty products, says Jeff Hajek, 
SVP of Americas operations at 
integrated network security 



solutions provider Stonesoft 
(www.stonesoft.com) . 

Therefore, enterprises must 
find a controlled way to sub- 
mit encrypted traffic for the 
same inspection as clear text 
HTTP data. "Not only will this 
give data centers' Web traffic 
an added layer of security, it 
can allow [IT] to comprehen- 
sively monitor the traffic in- 
side of the TLS/SSL encryp- 
tion, as well as detect and 
react to any unwanted con- 
tent," Hajek says. 



attack, malicious code gets injected into a 
Web page, and when an unsuspecting user 
clicks on a link, he or she is redirected to 
what looks to be a similar page and then risks 
having credentials or personal data stolen. 

Carl Herberger, vice president of infor- 
mation security and compliance services at 
managed technology service provider 
Evolve IP (www.evolveip.net), adds that 
because most Web applications display 
dynamic data originating outside the appli- 
cation, the client's Web browser has the 
potential to execute malicious client- side 
scripting. "Because the malicious script is 
sent by the application Web server, it will 
execute under the trusted context of the 
vulnerable Web site," Herberger says. 

To combat XSS attacks, Herberger rec- 
ommends validating all headers, cookies, 
query strings, form fields, and hidden fields 
against rigorous specifications; not allow- 
ing user information to be displayed in 
error situations; and implement scanning 
tools to detect XSS vulnerabilities of all 
pages where input from an HTTP request 
could possibly make its way into the 
HTML output. 

Prevent SQL Injection 

The Web Application Security Consortium 
describes an SQL injection as "an attack 
technique used to exploit Web sites that con- 
struct SQL statements from user- supplied 



input. When a Web application fails to prop- 
erly sanitize user-supplied input, it is possible 
for an attacker to alter the construction of 
backend SQL statements." 

Mandeep Khera, CMO for Web applica- 
tion security provider Cenzic (www.cenzic 
.com), recommends reviewing all logs to 
determine the types of activities taking 
place at the Web layer. "Any hacking 
attempts with SQL injection and XSS types 
of entry should show up in the logs," Khera 
says. "Once you know that hackers are 
attempting hacks through the Web, you 
[can take] steps to ensure that a comprehen- 
sive vulnerability assessment at the Web 
application layer is performed," he says. 

Properly Configure Devices 

Internet access requires a host of devices, 
such as routers, switches, and firewalls, to 
route Internet traffic and defend networks. 
If these devices are not properly installed, 
hackers can exploit weaknesses caused by 
these configurations to access and steal 
information, says Christopher Burgher, 
associate principal of availability services 
consulting at SunGard Availability Services 
(www . availability . sungard .com) . 

In addition to keeping devices properly 
patched. Burgher recommends making sure 
you don't put systems in production with 
default configurations, limit the number of 
services exposed to the Internet, and create 
hardening standards for new devices. 

Don't Get Speared 

Spear-phishing attacks constitute one of 
the fastest growing threats to your enter- 
prise. Unlike general phishing attacks, 
in which out of a million targets only a 
few people will fall victim, an attacker 
using spear-phishing masquerades as an 
employee from a distant department of. 



I Six Quick Tips ~| 



Boost Server 

& System Availability 



Solid-State Drives, Defragmentation 
& Virtualization Can Reduce Downtime 



by Drew Robb 

Trying to find an acceptable level of 
availability is like traveling toward infinity. 
You may go a long way, but you are never 
going to arrive at the goal. So when your 
server availability is already high, what can 
you do to eke out some more? 

Address The Weakest Link 

Computer technology is improving 
steadily in terms of faster processors, multi- 
ple cores, better motherboards, more mem- 



I ory, and virtualization. In comparison, the 
hard drive is a sluggard. 

"The hard drive is the weakest link in a 
computer with regards to performance," says 
Mark Harrer, a sales engineer at Diskeeper 
(www.diskeeper.com). "To compound 
things, files on a computer are stored in frag- 
ments scattered randomly around the disk." 

Most people are aware that fragmentation 
results in slowness in running programs, 
accessing files, and performing backups. 
What isn't so well-known is that storing 
files in contiguous form keeps a system 



BONUS TIPS 



■ Defrag virtual files. Virtual 
machines are twice as prone to 
fragmentation. This adds to 
system latency and causes vir- 
tual machines to work far hard- 
er than they need to, says 
Mark Harrer, a sales engineer 
at Diskeeper (www.diskeeper 
.com). The good news is that 
defrag software is becoming 



available that directly address- 
es fragmentation on virtual 
servers and prevents them 
from becoming heavily frag- 
mented. 

■ Use a colocation facility. 

Few can afford a second data 
center for DR purposes, but 
colocation facilities allow you 



to have servers standing by 
and rapidly available in the 
event of a failure. "Coloca- 
tion can be a big money- 
saver over building a re- 
mote site for yourself," says 
Stephen Foskett, director 
of strategy services at 
GlassHouse Technologies 
(www.glasshouse.com). 



stable and performing at peak efficiency. 
The moment a file is scattered across a 
drive, it can lead to performance reduction, 
system crashes, conflicts, and errors. 

Some of the problems caused by file frag- 
mentation are slow boot times and comput- 
ers that won't boot up, slow or aborted back- 
ups, file corruption and data loss, crashes 
and system hangs, errors in programs, mem- 
ory problems, and hard drive failures. 

If fragmentation is not addressed routine- 
ly, IT workload can increase due to misiden- 
tifying the source of problems. This can lead 
to unnecessary software reinstallations, hard 
drive reimaging, and even unnecessary 
equipment replacement. On the other side of 
the coin, IT managers note ease of system 
management resulting from greater levels of 
availability upon instituting regular defrag- 
mentation of workstations and servers. 

"Additional drive activity due to fragmen- 
tation will result in a shortened life span of 
the hard drive, more frequent support calls 
due to slower computer access, increased 
power consumption, and the purchase of new 
computer hardware to temporarily fix or 
mask the problem," Harrer says. "The solu- 
tion is to run a disk defragmentation pro- 
gram — though not the defragmenter built in 
to Windows, which requires approximately 
15 to 20% free space to run and oftentimes 
does not finish if it encounters a problem." 



Employ A Solid Strategy 

Another strategy to address availability 
also deals with the hard drive bottleneck: 
implementing SSDs (solid-state drives). 
Hard drives run a couple hundred opera- 
tions a second compared to millions by 
RAM and billions by multicore CPUs. 
Replacing regular hard drives with SSDs 
will make things run faster and smoother. 

"This performance gap exists today 
because servers have gotten faster while 
storage systems, which use a spinning disk 
and mechanical movement of the read/write 
heads, have not kept up," says Phil Mills, 
chair of the SSSI (Solid State Storage 
Initiative) of the SNIA (Storage Networking 
Industry Association; www.snia.org). 

Solid-state storage is based on semicon- 
ductor technology, which is similar to that 
on which CPUs are based. Without moving 
parts, it is orders of magnitude faster than 
regular drives. As the price of SSD is still 
high— $500 for a 140GB drive is about the 
best you'll get — what makes sense is to use 
them for only the most heavily used and 
most highly available systems. 

Storage vendors in particular are setting 
up SSDs as Tier for the highest perfor- 
mance and then using other drives for the 
lower tiers. 



Use Virtual Machines 

Virtualization is looked upon as a way to 
do a lot more with less. But it's also a wise 
move when it comes to availability. By con- 
solidating onto fewer machines, there is 
lower reliance on hardware. And with that, 
you reduce the chances of a hardware failure. 

"Virtualization is normally associated 
with easier management and lower cost, 
but the same technology can improve 
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say, a bank and requests sensitive infor- 
mation, says Kunal Johar, president of 
security consulting firm vOfficeware 
(www.vofficeware.com) . 

"For example, the attacker could spoof an 
email from a West Coast office and send it to 
people on an East Coast office," says Johar. 
"If even one person falls victim, he or she 



could get discrete access to the enterprise 
network to commit more severe crimes." 

According to Johar, the best defense 
against this type of attack is user training. He 
says "mock phishing" exercises, where a spe- 
cially crafted email is sent to your employees 
and their responses are measured, are best for 
teaching users about this threat. 



Smartest Tip: 

Know Who's On Your Network 



You need to know who can access your enter- 
prise network and how they access it, says IVIatt 
Bishop, a professor of computer science at UC 
Davis and a member of the IEEE computer 
society (www.ieee.org). 

"If there is a network connection you don't know 
about or a virtual private network into your instal- 
lation but with an untrusted end point, such as a 
home computer, then you are trusting something 



(or someone) you do not know about," Bishop 
says. "Not knowing what assumptions you are 
making or not knowing how accurate those 
assumptions [are] is a security problem." 

Bishop's solution is basic: Figure out who is 
connecting to you and from where and assess 
whether you trust them. "If not, prevent the 
connections. If so, worry about other prob- 
lems," he says. 



Most Basic Threat: 



Improper Patch Management 



Improper patch management 
can leave your enterprise sus- 
ceptible to Web-based threats 
because unpatched servers 
are exposed to manual and 
automated attacks, says 
Randy Abrams, director of 
technical education at secur- 
ity solutions provider ESET 
(www.eset.com). "Patch 
management identifies Web 
threats, and it prevents many 
threats from being an issue," 



Abrams says. If a user's com- 
puter is properly patched, a 
Web site that has exploit code 
on it won't work. 

But we are often our own 
worst enemy in this area, says 
Ralph DeFrangesco, a security 
expert and adjunct professor in 
computer security at Drexel 
University. "It is easy to fall 
into the trap of putting off 
patching. Companies like 



Microsoft, Adobe, and Apple 
are all releasing patches on 
the same day [while] every 
other software company can, 
and does, release patches at 
some time during the year," 
DeFrangesco says. "Most 
companies have a test and 
production environment to 
which these patches need to 
be applied. It's a tremendous 
amount of work, and it's easy 
to drop the ball." 



reliability and availability by eliminating 
the impact of physical component failures 
on a virtual system," says Lee Caswell, 
founder and chief marketing officer of 
Pivots (www.pivot3.com). 

Many users, he says, think of servers as 
physical entities that need physical failover 
hardware. But this does not have to be the 
case. 

"As servers move to virtual machines, they 
can also utilize virtual failover and recovery 
methods," Caswell says. "This gives a higher 
level of availability and can lead to real sav- 
ings in cost, power, and cooling." 

Virtualize I/O 

As virtualization develops, it expands into 
more and more avenues. Following server 
virtualization, a wave of storage virtualiza- 
tion has gripped the IT landscape — and net- 
work switches are being virtualized, too. 

The next area to be included is I/O. The 
effectiveness of many virtualization 
improvements relies heavily on server I/O 
resources. If these are too rigid, that can act 
as a barrier to improving the data center. 
One solution is I/O virtualization. 

"People tend to think of I/O as an integral 
part of the server rather than as a separate 
entity that can be virtualized and optimized 
on its own," says Robert Napaa, vice presi- 
dent of business development at VirtenSys 
(www.virtensys.com). "By separating the 
I/O from the servers, IT managers gain a 
much greater flexibility to adapt their data 
centers to the business needs without incur- 
ring additional cost or delays." 

Rather than requiring an overhaul of 
existing servers, this can be done without 
major change to the IT infrastructure. 

"The ideal I/O virtualization solution 
is totally transparent to the existing IT 



infrastructure, which means that there 
are no changes introduced in the servers, 
OS, applications, I/O adapters, or device 
drivers," Napaa says. ^ 



Simplest Tip: 

Add Internet Redundancy 

There are services easily implemented that 
can add Internet redundancy to any network 
without the need of a complete overhaul or 
the adoption of complex networking protocols. 

"Adding an Internet redundancy service can 
shift downtime to zero, even for those without 
a T1 line," says Darren French, vice president 
of business development at XRoads Networks 
(www.xroadsnetworks.com). 

If one line goes down, the other is instantly 
available. This technology can allow IT to 
monitor Internet traffic usage and control of 
access to available bandwidth. 

Best Tip: 

SSD For OS— Quick 
Bootup 

An SSD operating as a boot drive with only the 
OS loaded gives you a far more rapid system 
bootup. SSDs offer up to lOOMBps read per- 
formance, far more than a regular hard drive. 

"Use the SSD used simply as a boot drive for 
the OS, [and] you get great performance," 
says Doug Brooks, Xserve product manager 
at Apple (www.apple.com). 




Prepare For The Unexpected With Room Alert 



JNJ^o one knows when or how disaster will 
strike. We just know the potentml is always there, 
so preparation is crucial to minimizing its impact 
on computers, networks, users & business. 

When disasters occur, there are significant 
costs in areas that go far beyond the simple 
replacement of damaged hardware. This is 
because what happen.^ in the data center or other 
facility effects the entire oi^anization. If disaster 
strikes your facility, how will iL impact business? 
Who will gel the blame? Could it have been 
prevented? What will it cost? 
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Room Aieii products can monitor: 

* Temperature • Smoke / Fire 

■ Humidity 

* Heat Index 

■ Main / UPS Power 

* Flood /Water 

* Room Entry, Motion 

* IP Network Cameraa 



Air Flow 
Sound, Light 
Panic Buttons 
Dry Contacts 
Switch Sensors 
Wireless & More 



AVTFCH has a full line of powerful, scalable 
Room Alerf solutions for real-time 
envirotiinent monitoring in a computer room, 
data center or other facility. All models 
arrive assembled with easy to install 
hardware, cables, sensors, easy-to-use 
logging & alerting sotHare, printed 
documentation, unlimited technical support 
and a '30-Day Satisfaction Guarantee'. Users 
can t}'pically install in under 10 minutes. 

Room Alert products monitor critical 
environment conditions like temperature, 
power, humidity, flood, smoke, room entr)\ 
air flow, motion and more, alert statTby any 
method and can take automatic corrective 
action. There is a model that is right for any 
organization and budget... yours too! 

Call or Visit Us Online Today 



S^AVTECH 



888.220.6700 • 401.628.1600 
AVTECH.com 



Protect Your IT Facility... Don't Wait Until It's Too Later 
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Plan For CIO Succession 



Alhough It May Seem Like A Far-Off Concern, 
It's Important To Establish A Chain Of Command 



by Carmen Carmack 

For many CIOs, identifying, mentoring, 
and managing a successor is a long-term 
project that's put off due to the pressures of 
short-term issues and other tasks. The suc- 
cession planning process requires collabora- 
tion with other departments, such as HR, and 
it calls for CIOs to consider future needs 
along with grooming someone to replace 
them, which can be a bit uncomfortable in 
today's unpredictable IT environment. 

In its second CIO succession trend sur- 
vey, CDW found that the majority of CIOs 
do not have a succession plan in place. 
"Despite the important role of CIOs in 
overall business strategy, many corpora- 
tions are unprepared for CIO succession," 
says Mark Gambill, market insight profes- 
sional at CDW. "According to the CDW 
data, almost half (49%) of CIOs spend 



TOP TIPS 



Leverage HR information you already have 
to help identify, manage, and develop suc- 
cessors. Make succession planning a part of 
the overall employee development process. 

According to research firm Gartner, focus- 
ing on people— during both uptimes and 



more time on business strategy than IT 
issues. However, only 39% of IT decision 
makers across corporate and government 
sectors say their organizations have a for- 
mal CIO succession plan in place." 

Not having a succession plan can lead to 
an ad-hoc, reactionary solution when a CIO 
leaves the company. Poor succession plan- 
ning places the enterprise at risk due to dis- 
ruption, lack of direction, and loss of insti- 
tutional knowledge. To ease the succession 
planning process, CIOs can roll it into 
overall employee development. This helps 
individuals acquire experience and leader- 
ship skills while benefiting the organization 
and leading to more satisfied employees 
and higher retention rates. 

A Succession Management Road Map 

According to APQC (www.apqc.org), a 
nonprofit benchmarking and best practices 



downtimes— means preparing for changes 
to professional profiles and preparing for 
effective talent management processes. 

If your organization does not have the talent 
you need, now is the time to recruit high- 
potential individuals. 



research firm, succession management 
"involves identifying and monitoring exist- 
ing talent pools to continuously meet the 
needs of an organization. It encompasses 
many of the systems and processes tradi- 
tionally performed by human resources, but 
it is a more comprehensive approach to 
ensuring that the right talent is prepared 
and in the right place." 

Although each organization is unique, best 
practices for succession planning generally 
include defining roles, analyzing needs, iden- 
tifying and developing talent, and evaluating 
the effectiveness of the process. Succession 
planning can leverage employee data that 
you already have in place, such as perfor- 
mance evaluations and core competencies. 

In its booklet Passport to Success Series: 
Succession Management, A Guide For 
Your Journey To Best Practice Processes, 
APQC recommends the following steps and 
best practices for implementing succession 
management: 

Initiate a succession management 
effort. This step lays the foundation for suc- 
cession management by identifying the roles 
of HR, senior management, and employees. 
It also connects the effort to ongoing busi- 
ness strategies and organizational goals. 

Perform a needs analysis. To determine 
the succession plan, you must identify the 
talent and skills required for the position. 
For example, a CIO position might require a 
combination of IT, policy, legal, and busi- 
ness expertise, in addition to leadership 
qualities. The analysis should consider the 



current and future strategies of the organiza- 
tion as a whole and the IT department itself. 

Identify talent. By defining competen- 
cies that relate to the needs assessment, you 
can evaluate and classify employees. For 
example, success factors for leaders might 
include priority setting, problem solving, 
and drive for results. You can also include 
performance evaluations to help identify 
high-potential employees. 

Engage and develop talent. Organi- 
zations should link employee and leadership 
development to the current and future needs 
of the business. You can do so by involving 
HR and tying development to strategic plan- 
ning. Ideally, development should start early 
on in an employee's career. 

Focus on developing leaders. To develop 
and engage future leaders, you can use men- 
toring, coaching, job rotation, and formal- 
ized feedback. However, job assignment and 
experience are sometimes most important. 

Retain talent. You can encourage em- 
ployees to get involved in the performance 
evaluation process by ensuring ownership 
lies with employees and managers, not HR. 
When employees initiate the appraisal 
process, they build commitment to the 
organization and are more motivated. 

Gauge success of succession manage- 
ment efforts. You should evaluate both the 
overall process and the individual compo- 
nents, such as developing talent and identi- 
fying high-potential employees. Rather than 
focusing on measures such as ROI, evaluate 
areas that relate directly to your efforts, such 
as employee satisfaction and turnover rates. 

Consider Automation 

CIO succession planning seems to be more 
challenging for small and midsized enterpris- 
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Recover From A Disaster 



Developing & Testing A Solid Plan 
Is Key To Quick Data Recovery 



by Jean Thilmany 

For enterprises dependent on their IT 
operations — and today that pretty much 
means all of them — any kind of disaster 
can be potentially devastating, whether it's 
a power loss or a natural disaster such as a 
hurricane or a tornado. No matter the form 
the disaster takes, any interruption in IT 
services means an enterprise is losing rev- 
enue and, depending on its nature, may fall 
out of regulatory compliance. 

Disaster recovery planning is the key to 
avoiding or minimizing such loss and to 
getting your systems up and running as 
soon as possible. Luckily, with a few 
basic business needs particular to your 
own enterprise in hand, a disaster recov- 
ery plan can be relatively straightforward 
to enact. 

"Companies rely on technology more 
than ever, so when their technology is 
down, they're losing a lot of revenue — up 



to millions of dollars every hour," says 
Chris Sousa, manager of managed services 
at Dataprise (www.dataprise.com), an IT 
support provider. 

Recovery Time & Point 

The first things you'll need to deter- 
mine are your recovery time objective and 
your recovery point objective, referred to 
as RTO and RPO. These numbers will 
come from senior executives and will give 



security manager at Kaufman, Rossin & 
Co (www.kaufmanrossin.com). 

"You'll need to speak with whomever at 
the company makes business-level deci- 
sions to determine what's acceptable for 
downtime and recovery," he says. 

The recovery time objective signifies 
the amount of time executives have deter- 
mined the enterprise can be without a spe- 
cific system. The RTO for each system 
will vary, depending on its value to the 
enterprise, Rey says. 

"So if your enterprise has an ecommerce 
gateway and it's down for one hour, you 
can calculate how much money you'd lose," 



Use a comprehensive disaster recovery 
checiclist to malce sure you analyze your 
infrastructure from all angles. 



you a starting point from which to work. 
Having these two objectives in hand will 
help you budget for and best lay out a dis- 
aster plan, says Jorge Rey, information 



TOP TIPS 


• First, you'll need the recov- 
ery time and recovery point 
objectives for all your impor- 
tant systems. 

• Analyze each system to 
ensure it can meet those 
targets and then upgrade 


or make changes where 
necessary. 

• Email may be down during 
a disaster, so put a calling 
tree in place. Make sure all 
staffers know who to call in 
the event of an emergency. 


• As ever, make sure your 
backup system can meet 
disaster recovery needs. 

• Test the plan. Testing need 
not be run live, although a 
live test would be the most 
effective type. 



Rey says. "An accounting package, on the 
other hand, isn't used all the time, and when 
it goes down, the business isn't losing rev- 
enue, so RTO can be a bit longer there." 

The recovery point objective is the point 
in time from which you'll want lost IT 
operations restored. For example, one 
enterprise's RPO might be one hour from 
the point at which IT operations failed; 
another enterprise's could be one minute. 
Your disaster recovery plan will necessarily 
vary depending on the RPO number, which 
might vary by individual system. 

In addition to lost revenues, enterprise 
executives also take issues of regulatory 
compliance issues and overall business 



efficiencies into the equation when deter- 
mining RTO and RPO, Rey adds. A bank, 
for instance, needs to comply with specific 
RTO numbers. 

With RTO and RPO in hand, you'll next 
analyze the software and hardware in place 
in your data center to ensure they can meet 
the recovery time and recovery points 
called for, Sousa says. 

IVIeeting Targets 

Use a comprehensive disaster recovery 
checklist to make sure you analyze your 
infrastructure from all angles, including the 
ones you wouldn't immediately think of, 
says Jeff Grace, president of NetEffect 
(www.neteffect-it.com), a computer and IT 
support and consulting provider. 

Email communications, for example, 
may be seen as of secondary importance, 
but it is actually typically one of the first 
things needed if a true disaster strikes, says 
Mike Klein, president and COO of Online 
Tech (www.onlinetech.com), a managed 
data center operator. 

"Everyone offsite needs to communi- 
cate with each other and the outside 
world," he says. "On the other hand, pay- 
roll can be down for a week in the case of 
a disaster. Employees might not like it, 
but the business will survive if paychecks 
are a few days late." 

Work with the systems that lag until 
you're sure they can meet your enterprise's 
RTO and RPO for them, Rey says. 

And be sure you're backing up on a 
schedule that will allow you to meet RPO, 
Rey adds. "If employees input information 
into your accounting system on a daily 
basis, but you back up on a weekly basis, if 
it crashes, you'll lose that week's worth of 
information," Rey says. "The recommenda- 
tion is to do daily backups if your RPO is 
one day for that system." 
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es. "Large businesses are more likely to have 
formal CIO succession plans in place," says 
Gambill. "According to the CDW data, 63% 
of large businesses have succession plans 
compared to 46% of medium-sized business- 
es and 15% of small businesses." 

For companies of all sizes, automation 
can help ease the burden and make succes- 
sion planning part of the ongoing employee 
development process. Automated tools 
make it easier to identify and manage tal- 
ent. Some tools are part of a larger, inte- 
grated employee management system, 
while others are standalone systems that 
may or may not interoperate with other 
HR-related products. 

"With automation, succession can be hap- 
pening all the time, rather than a laborious 
event that happens once," says David Karel, 
vice president of product marketing at 
Succes sFactors (www . succes sf actors . com) , 
a performance and talent management soft- 
ware company. "You're always thinking 
about leadership pathing and career pathing; 
you always have the latest information at 
your fingertips. You can really look holisti- 
cally at whether you have the talent to sup- 
port your strategy." 

Paper data becomes outdated almost 
immediately. With automated tools, data 
can be updated and centralized. "You can 
look at up-to-date information, manipu- 
late and search the data, and look at it 
with a team," says Karel. "As you identify 
a set of successors, you can then do career 
and development planning and manage- 
ment. You can also create a development 
plan on our system and map it to the right 
learning content." 

Succession management software 
can help identify key people that could 



Key Points 



Succession planning helps individuals 
acquire experience and leadership skills, 
leading to more satisfied employees, 
higher retention rates, and lower recruit- 
ment costs. 

To ease the succession planning workload, 
ClOs can treat it as a part of the ongoing 
employee development process rather than 
an annual event that requires weeks of 
preparation. 

Automated succession planning and man- 
agement tools make it easier to identify 
and manage successors by centralizing 
information, keeping that information up-to- 
date, and displaying the effects of move- 
ment within the organization. 



potentially fill a role. If it's integrated 
with other HR talent management tools, 
you have already captured a lot of process 
content such as performance ratings, com- 
pensation history, manager-generated 
information, and core competencies. 
Automated tools can also make it easier to 
see the bigger picture of talent manage- 
ment and employee roles. "With [an] 
organization chart interface, you can see 
succession readiness levels, and you can 
see the downstream implications of your 
decisions," says Karel. 

By implementing succession planning, 
CIOs can identify and manage talent, 
develop staff, and gain more satisfied 
employees that are less likely to leave for 
greener pastures. 



When analyzing systems, be sure to pro- 
tect all essential servers first and then fig- 
ure out whether the remaining pieces are 
necessary to protect, says David Michael, 
director of technology at the law firm 
Turner Padget Graham & Laney. 

From there, look at your backup method. 
"With the low cost of storage and Internet 
traffic, online backup is becoming far more 
cost-effective and is much easier to get 
your data off site than tape backup," Online 
Tech's Klein says. 

Adding servers to the offsite location is 
an easy next step, he adds. "The servers can 
be preloaded with the applications and 
stored at the same site as the data, and the 
backup data can be loaded very quickly 
should a disaster strike." 

Backup via virtualized servers and 
SAN-to-SAN replication is the next step 
when shorter recovery times are required, 
Klein adds. The SANs can replicate in real 
time between the production site and the 
disaster recovery data center to provide a 
solution that can fail over in minutes 
rather than hours. 

Present executive staff with several 
options from lowest to highest cost, 
reminding them that the greater expense, 
the lower the risk of extended downtime 
due to a disaster, he adds. 

Test The Plan 

With the above steps in place, you've 
now reached what Kaufman, Rossin & 
Co.'s Rey says is the toughest part in any 
disaster plan: testing your plan and prepar- 
ing staff. Remember, you may not be able 
to reach your staff — or any enterprise 
employees — via email. 

To alert staff members, draw up a calling 
tree that identifies who will be notified, by 
whom, and in what manner in the event of 
an emergency, Rey says. 



"If there's an incident, someone needs 
authority to say we need to turn to our plan," 
he adds, "so know who will be responsible 
for making that statement. Then your team 
can go into action, making your calls on 
your call tree." Staff may need to meet at an 
offsite location from which they can access 
remote backup sites, he adds. 

Even the best disaster recovery plans 
require periodic testing, says Chander Kant, 
CEO of Zmanda (www.zmanda.com), which 
provides open-source backup software. 

"But unfortunately, testing of disaster 
recovery plans sometimes doesn't come up 
on the priority list," he adds. "IT managers 
should make this a mandatory exercise on a 
periodic basis." 

One idea for this test, Rey says, would 
be to shut down the network and require 
employees to resume operations within the 
RTO and from the RPO. 

"Of course, that's very invasive to the 
business operations and is up to executives," 
he adds. "A tabletop test — sitting down with 
everyone who would be involved in your 
response team and going through procedures 
and response to make sure you can recov- 
er — should suffice." 



Key Points 



Have recovery time and recovery point 
objectives in hand when planning your 
disaster recovery. 

Ensure your pertinent IT systems can 
be brought up within the RTO and 
RPO limits. 

Test and train staff on the disaster 
recovery plan. 
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IP KVM + LCD CONSOLE solution will 
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an integrated network of devices 
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USB TEMPERATURE MONITOR WITH EMAIL ALERTS 



Tennperature@lert monitors the ambient temperature and alerts you via 
email when it rises or falls outside your acceptable range. The temperature 
sensor is accurate to within ±0.5°C and can report temperatures from -40°F 
to -i-200°F. The customizable alert message can be sent continuously or 
just once when an alert is triggered. Real-time graphing and XML support 
provide you with the tools you need to integrate temperature readings 
into Web sites and other third-party applications. 





USB Edition • $129.99 

Connects to your PC via an available USB port, so it 

never needs new batteries or an AC power adapter 

Notifies you via email of changes in room temperature 

Precalibrated sensor 

Runs on all Windows platforms 

Logs to TXT, temperature graph, event log, and XML 

Runs as a Windows service 

SNMP support 

Easy integration with IIS 

Includes free software upgrades for one year 

Choose degrees Celsius or degrees Fahrenheit 

Support for SMTP authentication 

Free shipping 



Wi-Fi Edition • $299.99 

Connects to your network via 802.1 1 b/g wireless and is 
powered by an included AC wall adapter — no computer 
required 

> Notifies you via email of changes in room temperature 

> Precalibrated sensor 

> Includes free software upgrades for one year 

> Logs temperature readings to text and XML 

> XML data can be easily integrated into custom 
applications 

> Real-time temperature graph 

> Choose degrees Celsius or degrees Fahrenheit 

> Support for SMTP authentication 

> Expansion jack for humidity sensor (coming soon!) 
^ Free shipping 
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I Profits Up At 3Com 



Following a period of talk about acquisition 
and reorganization, networking supplier 
3Com reported fourth-quarter net income of 
$20.2 million based on $295.1 million in 
sales. This was less than last year's fourth- 
quarter figure of $321 .3 million, but it was 
better than Wall Street had expected. So far 
this year, 3Com revenue is at $1 .318 billion. 
It was $1 .294 billion at this point last year. 
"We had a very good year, delivering on all of 
our key goals," says CEO Bob Mao. He also 
says 3Com has a "clear, articulated strategy 
that we are successfully implementing." 




I FTC OKs Nokia-Siemens Bid 

Nokia-Siemens has received a green light 
from the Federal Trade Commission to pur- 
sue its bid to buy a business unit and technol- 
ogy from Nortel Networks. Nokia-Siemens 
announced its interest in Nortel's CDMA 
(Code Division Multiple Access) wireless 
business and LTE (Long Term Evolution) 
technology in mid-June with a $650 million 
offer. Nortel filed for bankruptcy early this 
year after a continuous decline in revenue, 
and then the company announced in June 
that it is looking to sell various business units. 
Should Nokia-Siemens make the acquisition, 
it will take over all assets, intellectual proper- 
ty, research and development, inventory, and 
customer and partner relationships. 

I LG Display Q2 Sales On The Uptick 

LG Display reported profits that beat analyst 
predictions for the second quarter, due in large 
part to a surge in LCD sales. The company's 
net income of 302 billion won, or $239 million, 
was down 60% from the same quarter last year 
because of lower flat-panel prices. However, 
LG's Q2 sales rose 1 6% year-over-year, and 
the company expects the sales surge to contin- 
ue in the third quarter and beyond. In addition 
to announcing encouraging figures, LG also 
says it plans to invest 3.27 trillion won— about 
$2.55 billion— in a new LCD production line. 

I Microsoft Announces Azure Pricing 

Microsoft has released pricing information for 
its new cloud computing platform, Windows 
Azure. The Web services will be offered on a 
per-use basis, with computing costing 12 
cents per hour, storage costing 15 cents per 
gigabyte, storage transactions costing 10 
cents per 10,000 transactions, and bandwidth 
costing 10 cents in and 15 cents out per giga- 
byte. The company will also offer SQL ver- 
sions starting at $9.99 for a Web edition. 
Azure's pricing is in line with competing offer- 
ings from providers such as Google and 
Amazon, but Microsoft expects its platform to 
flourish based on its features. 

I Electrical Engineers 

Reach Record Unemployment Rate 

IEEE-USA says the unemployment rates for 
U.S. electrical and electronics engineers hit a 
new high of 8.6% in the second quarter. The 
jobless rate for electrical engineers more than 
doubled from the 4.1% rate in the first quarter 
of this year. The previous quarterly record 
was 7% in the first quarter of 2003. Based on 
data from the Department of Labor's Bureau 
of Labor Statistics, IEEE-USA estimates that 
29,000 electrical engineers were unemployed 
in the second quarter of this year. IEEE-USA 
also notes that the unemployment rate for all 
engineers jumped from 3.9% in the first quar- 
ter to 5.5% in the second quarter. 



Overcome Log 
Management Issues 
In The Data Center 



Logs Are More 
Than Just Logs 

by Chris A. MacKinnon 

Poring over logs in the data center has 
been a necessity for comphance, security, 
and other reasons. But according to a sur- 
vey conducted by Intelhtactics (www.intelh 
tactics.com), enterprises are beginning to 
look for more than "just logging" and want 
to use the tools for other tasks, including 
event detection, reporting, and automation. 
The challenge with logs is getting a handle 
on the data and actually turning it into use- 
ful information. Here, we take a look at the 
biggest problems with log management 
tools and provide tips and advice as to how 
you can overcome them. 

Problem Logs 

Pam Casale, chief marketing officer at 
Intelhtactics, says there are several reasons 
why logs present challenges in the data 
center. "First, there is a lot of data — tera- 
bytes of data. More data than a human 
could ever review in a reasonable time 
frame. Second, the logs from every kind of 
device are cryptic. You have to be an 
expert to understand the logs. And third, 
because there is so much data and not all of 
it is equally important, you will definitely 
miss important information if you can't 
transform the logs into security events. This 
requires some way to aggregate." 

Bruno Kurtic, vice president of product 
management at SenSage (www.sensage 
.com), says for many organizations, event 
data is their fastest growing data and, 
often, their single largest data store. He 
elaborates, "Log data, also called event 
data, is a record that is associated with a 
time stamp. Even for small firms, it's com- 
mon to generate over a terabyte a day. The 
problem in the first place is that most orga- 
nizations turn to legacy data management 
suppliers for help. Unfortunately, tradition- 
al data management systems were built for 
transactional data and not event data. The 
specific requirements to manage event data 
are different." 

Useful Logs 

According to Dominique Levin, execu- 
tive vice president of marketing and strate- 
gy for LogLogic (www.loglogic.com), 
today's economic times are pushing com- 
panies to get more for less. Levin com- 
ments, "When a company is already col- 
lecting logs, it makes sense to take those 
same logs and do more with them. The 
information contained in log files can be 



Active Monitoring 



used for a variety of purposes, such as com- 
pliance, database security, network securi- 
ty, and IT operations. Increasingly, cus- 
tomers are moving away from individual 
point solutions, which require different 
training methods and may not be compati- 
ble with solutions that the enterprise 
already has in place." 

Levin says rather than purchase a variety 
of point solutions to collect events with 
potential overlap, enterprises now value 
comprehensive log management platforms 
that go beyond "just logging" to tightly 
integrate with additional solutions. "That 
way," she says, "the company collects a log 
just once and uses it multiple times, thereby 
saving time and money." 

Kurtic says log data provides a wealth 
of information that extends beyond secu- 
rity and compliance and into the realm of 
business intelligence and business perfor- 
mance management. He notes, "Log data 
and other event data can reveal inefficien- 
cies [and] process issues and generate 
actionable reports that businesses can use 
to streamline operations and improve pro- 
ductivity. Effective log data manage- 
ment requires an enterprise-wide approach 
that provides true business intelligence, 
rapid delivery, and the ability to scale as 
needed and meet a wider range of busi- 
ness objectives." 

Managing Logs 

So what are the biggest issues with log 
management tools? Levin says when it 



In Casale' s opinion, the presence of the 
issues is largely dependent on which log 
management tool you choose. She notes, 
"Log management tools are typically sev- 
eral appliances (depending on the ven- 
dor). [The] security [group] has to pay for 



Key Points 



The requirements for log management 
have evolved. If s no longer enough just to 
be able to check the box for compliance 
and audits. What customers need is the 
flexibility to use their log and event data to 
make better business decisions. 
When a company is already collecting logs, 
it makes sense to take those same logs 
and do more with them. The information 
contained in log files can be used for a 
variety of purposes, such as compliance, 
database security, network security, and IT 
operations. 

Effective log data management requires an 
enterprise-wide approach that provides 
true business intelligence, rapid delivery, 
and the ability to scale as needed and 
meet a wider range of business objectives. 



rack space for each appliance, and this 
could be an unplanned expense. Security 
needs to get the logs, but they don't own 
or control the devices that generate the 
logs. This means that someone in IT who 
is accountable for firewalls has to config- 



The requirements for log management have 

evolved. What customers need is the 
flexibility to use their log and event data to 
make better business decisions." 

- Sen Sage's Bruno Kurtic 



J 



comes to compliance, simply collecting 
logs is not enough. She adds, "IT managers 
must assign employees to actively monitor 
the logs, investigate suspicious activities, 
and take action. Managing this process and 
ensuring that the necessary activities are 
completed in a timely manner can be a 
daunting task. Businesses often end up 
managing these types of compliance 
processes with spreadsheets, documents, or 
emails, which are vulnerable to version 
control issues and human error." Levin says 
many other organizations don't perform 
proactive reviews at all and just dump their 
log data into a "black hole archive." 



"In this age of increasing data 
breaches, many organizations 
have implemented database 
security monitoring," says 
Dominique Levin, executive 
vice president of marketing and 
strategy for LogLogic (www 
.loglogic.com). "The problem is, 
most of these products employ 
passive monitoring: Instead of 
being able to respond in real 



time, the IT staff only discover 
a data breach later on when 
they review their logs. By that 
point, much damage has 
already been done. The better 
alternative is to combine active 
monitoring with real-time 
response." Levin says a spe- 
cialized agent can detect 
more sophisticated attack pat- 
terns, and, more importantly. 



customers can use it to block 
suspicious access to critical 
information. If a suspicious 
query is submitted to the data- 
base, the agent software can 
terminate the access attempt 
and prevent an information 
breach. Blocking policies need 
to be granular enough to block 
only truly suspicious activity 
and not hurt productivity. 



ure the firewalls to generate the logs that 
security needs. Then security has to 'get' 
the logs. This is sometimes seen as inva- 
sive, or disruptive." 

Casale says there is also a general con- 
cern about storing logs. "Because there are 
so many," she says, "and because some 
vendors require or demand SANs or other 
storage investments, the cost of the logging 
tool increases. And, of course, this storage 
has to be managed. Consider a vendor that 
will transfer knowledge about how to man- 
age using their solution so you enhance 
your process while upgrading the technolo- 
gy. And choose a product that will make 
your security team smarter and faster. By 
this, we [Intelhtactics] mean choose a prod- 
uct that applies intelligence to data [and] 
turns lines of events into visuals to acceler- 
ate understanding." 

Kurtic says the global recession has 
forced enterprises to find new ways to 
extract more value from their existing 
IT investment and seek new ways to re- 
duce costs. He concludes, "The require- 
ments for log management have evolved. 
It's no longer enough just to be able to 
check the box for compliance and audits. 
What customers need is the flexibility to 
use their log and event data to make better 
business decisions." 
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Keep Applications Safe 
From Creation To Retirement 



by David Geer 

• • • 

Hackers make it their business to attack 
applications that house valuable data, includ- 
ing anything useful for identity theft, any- 
thing that brings a price on the black market, 
and secrets a foreign power might use for 
leverage. Application software — fraught with 
coding errors — makes good targets for these 
villains. That is why they build viruses and 
other malware to worm their way through 
these crevices in application software. 

Though government agencies use the same 
perimeter security — firewalls, behavior- 
based detection, and IPS (intrusion preven- 
tion systems) — that other enterprises do, 
once hackers scale these hurdles, poorly cod- 
ed applications lie open for them to ravage. 
Government agencies rely on critical systems 
that protect priceless data, and their software 
has not escaped the cyber criminal's notice. 

The widely reported hack of the Pen- 
tagon's Joint Strike Fighter project is just 
one example of such a critical application 
data heist. Although thieves compromised 
only some of the plans for the F-35 
Lightning II (those surrounding electronic 
systems), reports estimate the project's 
total cost at $300 billion, any fraction of 
which is still a hefty sum. In addition to the 
value of the stolen data itself, there are the 
risks to U.S. defenses, because the plans 
could reveal the plane's vulnerabilities. 

Create A Secure Life Cycle 

Various software security models exist for 
government agencies to follow to rid their 
code of flaws. Microsoft (www. microsoft 
.com) based the Secure Development 
Lifecycle, for example, on the SDLC (soft- 
ware development life cycle). The SDLC is 
the life cycle software follows from inception 
and creation through upgrades, changes, and 
(in some cases) into retirement. These secure 
development models engrain processes into 
the development life cycle that are useful for 
removing security flaws from the code. 

Other models include the OWASP's 
(Open Web Application Security Project; 
www.owasp.org) Comprehensive, Light- 
weight Application Security Process. Some 
vendors such as Fortify (www.fortify.com) 
and Telos (www.telos.com) refer to Software 
Security Assurance programs, while others 
use terminology such as Built-in Security to 
refer to the process of developers baking 
secure code into applications as they write 



Key Points 



The software development space offers 
ample models that describe how to build 
security into applications throughout the 
SDLC (software development life cycle). 
While developers may not be able to fix 
every flaw, by prioritizing high-risk applica- 
tions and their threats, they can mitigate 
many software security issues. 
The industry has fostered tools and tech- 
niques to find and fix software vulnerabilities. 




them. "Essentially, it comes down to a 
Security-Enhanced Software Development 
Lifecycle, which is what we call it at 
Foundstone," says Rudolph Araujo, director 
of consulting at Foundstone (www. found 
stone.com). 

The models demonstrate how to find and 
fix flaws in software at every opportunity: 
during the original coding, while testing for 
quality assurance, during vulnerability 
scanning when the software is in produc- 
tion, and as the software is further devel- 
oped to meet new demands. 

Catalog Existing Applications & Threats 

To secure existing applications, govern- 
ment agencies should begin by accounting 
for all their applications. "An organization 
may have 10,000 to 15,000 applications," 
says Roger Thornton, chief technology offi- 
cer at Fortify. By making an exhaustive list, 
they begin to identify the riskiest applica- 
tions. With a finite number of developers 
available to them, organizations should 
address their high-risk software first. 
Applications with high security clearances 
and extensive security policies, for example, 
have the greatest risk, according to Araujo. 

Agencies should also have lists of the 
security threats hackers use. SQL injections, 
for example, are a common type of attack 
and should be on the list with other viruses 
and malware. Again, due to the constraints 
of having only a few developers and many 
threats, the coding errors that make the soft- 
ware vulnerable to the worst threats are 
fixed first, according to Thornton. 

Build Ironclad Apps 

When creating new applications, agencies 
should do track modeling. With track mod- 
eling, developers map out all the potential 



security holes 
that may appear 
in the design. 

As developers write 
the code, they should do 
regular code reviews with sta- 
tic analysis tools. "These tools 
build an execution model of the 
code without actually running it. The 
tool scans the code every time a developer 
compiles it into a binary file to check for 
flaws," says Araujo. 

Then, as they test the code for quality 
assurance, the organization needs to do pene- 
tration tests to see whether they can break 
into the application and retrieve the data. 
Developers do this before the software goes 
into production, Araujo says, and then again 
annually, quarterly, or whenever the software 
evolves and as new attack vectors appear. 

Finally, when organizations are contract- 
ing with third parties, they need to use con- 
tracts that state their specific requirements 
and their right to audit the software and have 
coding errors fixed before the application is 
accepted. "Contractors often put back doors 
in the software they build to pull the data out 
in case of non-payment by the agency that 
hired them. The contract should specify that 
these are taken out," Araujo says. 

According to Thornton, there is a feeling 
permeating government agencies that these 
application security threats are part of a cyber 
security issue and that the NSA will take care 
of it. "We have great monitoring capabilities. 
But when the monitoring tells us that the 
software is being attacked every day, that 
means the software developer needs to fix 
the software," Thornton says. 



Software 
Security Tools 



A variety of vendors offer tools to help agen- 
cies build security into their software. Some 
tool capabilities include: 

• Taking snapshots of application software 
as it is developed 

• Building risk profiles that identify potential 
risks based on existing agency security 
policies 

• Reporting on file reads, service calls, and 
the general state of an application to deter- 
mine an application's attack surface area 

• Using templates based on common soft- 
ware security models to automate code 
reviews and prioritize fixes 




I Apple Reports Increase In Mac, 
iPhone Sales 

Apple announced better-than-expected 
results for the second quarter, thanks to 
increased sales of Macs and iPhones. 
Company-wide revenue was $8.34 billion, an 
increase of 12% from the same quarter last 
year. Apple sold 2.6 million Macs during the 
quarter, an increase of 4% from a year ago, 
and 5.2 million iPhones, a jump of 626%. 
Apple said the increased Mac sales were the 
result of a price cut across its laptop line. The 
company sold 10.2 million iPods during the 
quarter, a decline of 7% and Apple's first 
yearly drop in iPod sales. 

I Nokia Announces 
I I Q2 Earnings 

^^^^ Cell phone maker Nokia 
^^^H announced that its sec- 
^^^H ond-quarter earnings fell 
^^^1 66%, due to the global 

^^^H recession. Net profit fell 
I^^^JI from 1.1 billion euros in 
^^I^Hp Q2 2008 to 380 million 
^^^^ euros ($535 million) in Q2 
2009. Sales fell 25% to 
9.91 billion euros. The company shipped 103 
million mobile devices in Q2, which is down 
15% from last year; however, this number 
was slightly better than analysts expected. 
Those polled by SME Direkt forecasted a 
profit of 327 million euros and sales of 10.1 
billion euros. Olli-Pekka Kallasvuo, CEO of 
Nokia, says the company performed well in a 
"tough quarter" and that demand appeared to 
be bottoming out after falling sharply in 
recent quarters. 

I Microsoft Unveils 
New Licensing Options 

Citing customer demand and buying prefer- 
ences, Microsoft announced new volume 
licensing developments. Joe Matz, the com- 
pany's corporate vice president of worldwide 
licensing and pricing, discussed the new 
options and their reasons for coming into 
existence in a recent blog post. One novel 
product is the Microsoft Enrollment for Appli- 
cation Platform, due out at the beginning of 
October along with other packaged offerings. 
It's a suite incorporating Microsoft SQL 
Server, Microsoft Office SharePoint Server, 
Microsoft Dynamics xRM, Microsoft Visual 
Studio, and Microsoft BizTalk Server. 



Save 
Yourself 
Time 



When you post a free Want-To-Buy 
or For-Sale Listing at Processor.com. 

you save more thar^ time. Hundreds 
of the nation's leading computer 
dealers will see your posting and 
let you know if they have the 
equipment you are looking for. 
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Study: Many IT Pros 
Don't Use Passwords 
On Smartphones 

About 35% of IT professionals don't use 
passwords on their business phones or 
smartphones, though it is likely that they 
understand the risk of not doing so. That's 
among the major findings of a survey con- 
ducted by data encryption, security, and com- 
pliance company Credant Technologies. The 
survey evaluated the protection practices IT 
professionals used for their mobile devices 
and was conducted with 227 IT professionals 
from companies of more than 1 ,000 employ- 
ees. Another Credant survey revealed that of 
the general public, 40% of individuals use 
passwords on their mobile devices, showing 
that IT professionals are better at using pass- 
word protection. 




"Given the additional findings of both surveys, 
with both IT professionals and the general 
public confirming that they store a plethora of 
business as well as personal data on those 
phones, this is a concern for businesses who 
have to ensure compliance with a variety of 
state and federal data privacy and breach 
notification regulations," says Sean Glynn, 
the director of marketing for Credant. 

Types Of Info 

When it comes to what types of information 
IT professionals are storing on their business 
mobile devices, most are storing names and 
addresses of both business and personal 
contacts. Many individuals also store both 
business and personal emails, bank account 
details, appointment calendars, credit card 
information, photos, and passwords. This 
information, if left in the wrong hands, could 
leave companies open to personal identity or 
corporate data theft. 

It's not so much a surprise that IT profession- 
als are using their mobile devices for both 
business and personal tasks, but the fact that 
companies aren't doing more to safeguard 
potentially sensitive data is a surprising out- 
come, Glynn says. 

"The implications to their business of a poten- 
tial data breach have either not been recog- 
nized or not been acted on," he says. When it 
comes to protecting corporate data, Glynn 
says, companies should "set data protection 
policies for all smartphone users in the enter- 
prise, communicate the policies clearly and 
repeatedly, and put the tools in place to audit 
and enforce those policies. At a bare mini- 
mum, password protection should be re- 
quired. But better than that, encrypt the sen- 
sitive corporate data that could cause untold 
damage if one of those unprotected phones 
got into the wrong hands." 

by Kris Glaser 



American Clean 
Energy & Security 
Act Of 2009 



Electricity Rates Will Rise, 
But Owners Can Control Costs 



by Bridget Mintz Testa 

"There are no cap-and-trade schemes 
in existence or in planning that would affect 
small data centers," says Andy Lawrence, 
research director in eco-efficient IT with 
The 451 Group, which owns Tierl 
Research. This doesn't mean, however, that 
H.R. 2454, the 932-page American Clean 
Energy and Security Act of 2009, which 
passed in the House of Representatives June 
26, won't affect data centers of all sizes. 

The cap-and-trade portion of the act is 
directed at true high carbon emitters such 
as power plants and big manufacturers. 
Under the cap-and-trade rules, big emitters 
may be given or will have to purchase car- 
bon offset certificates. If the emitter doesn't 
produce that much carbon, it can sell its 
certificates in a carbon exchange market to 
be established by the act. 

"Cap and trade is a small piece of the bill, 
but it is a piece that speaks to how emission 
of greenhouse gases can be priced to reduce 



and consulting organization, also focuses 
on helping data centers reduce energy con- 
sumption and increase efficiency. "You 
take so much energy into a building to pro- 
vide energy to the computers," says John 
Stanley, a project manager with the Uptime 
Institute, "so focusing on IT efficiency first 
has the potential to save a lot of energy." 

As Stanley explains, if power usage 
effectiveness — the ratio of power use by 
IT equipment to all power use in a data 
center — is two, then it takes 2 kilowatts to 
provide 1 kilowatt to the IT equipment. 
"If you save 100 watts on the IT equip- 
ment, then you save 200 watts altogeth- 
er," he says. Using less electricity for the 
IT equipment also generates less waste 
heat, so IT savings are compounded by 
reduced air and power conditioning. 
"Start with the efficiency of the IT sys- 
tems," Stanley says. 

According to Tierl Research, a medium- 
sized data center with a 1 -megawatt draw at 
10 cents per kilowatt-hour can save 



Key Points 



Cap-and-trade laws won't directly affect 
data centers owned by small or medium- 
sized enterprises. 

Data centers, along with everyone else, will 
see electricity rates rise via rate hikes. 
Despite higher rates, increasing efficiencies 
and reducing energy use can keep data cen- 
ter costs low and might even reduce them. 



Although reducing energy consumption is great 

from a green perspective, an even more 
compelling reason for enterprises is to avoid the 
capital expenses of building a new data center. 



emissions," says Kathrin Winkler, a director 
of the Green Grid and the senior director of 
corporate sustainability at EMC. 

Data centers don't emit carbon — at least 
not directly. The electricity they use is gen- 
erated at the power plant and so is the car- 
bon resulting from data center energy con- 
sumption. Power plants will pay for those 
emissions, but they'll pass the costs along 
as higher rates. 

The legislation "will hit data centers 
through an increase in electricity bills by 
20% or more, depending on the way [the 
costs of cap and trade] are passed through," 
says Bill Mottram, managing partner of 
Veridictus Associates (www.veridictus 
associates.com) and head of the sustainabil- 
ity portal of the Wikibon Project. "Up to 
30% of the energy of an enterprise could be 
absorbed by a data center," he says. So if 
your company hasn't already embarked 
on greening its data center(s) by reducing 
energy consumption, now is the time 
to start. 

Reducing Energy Use 

The Green Grid's focus is on reducing 
energy use and increasing energy efficiency 
in data centers. The consortium of companies 
involved in the data center business is cur- 
rently working on three initiatives to achieve 
those goals. "We are trying to collect metrics 
on what people are trying to do to conserve 
energy," Winkler says. "We are also collat- 
ing a set of design best practices, and the 
Green Grid Academy has online training for 
people to understand these metrics." The 
online training may be especially relevant to 
small and medium-sized enterprises. 

The Uptime Institute (www. uptime 
institute.org), a privately owned research 



$87,600 yearly with just a 10% increase in 
energy efficiency. "Twenty or 30% is 
entirely achievable," Lawrence says. 

Recommended Means 

Server virtualization is universally rec- 
ommended as a means of saving energy in 
data centers. Mottram also recommends 
virtualizing data storage and using other 
data-reduction technologies, such as data 
deduplication (eliminating redundant data), 
compression, and taking "snapshots" of 
dynamically changing data instead of 
recording every instance of it. Of course, 
snapshot frequency depends on the data's 
importance. "Virtualization works for both 



servers and for storage," Mottram says. "It 
can get you up to 80%-plus utilization lev- 
els with storage." 

Server power supplies are key to saving 
IT energy. "A lot of power supplies are 
inefficient," Stanley says. He estimates 
that converting from AC to DC may cost a 
quarter of a server's input power. "Data 
center operators can ask equipment 
providers for more power-efficient 
servers," he says. "The EPA has just come 
out with standards for Energy Star-rated 
power supplies and devices." 

Stanley also recommends turning off 
"comatose" servers, i.e., those that are 
plugged in and turned on but aren't doing 
anything or anything important. These are 
often left running some obsolete applica- 
tion. "Ten percent of comatose servers in a 
data center isn't unusual," Stanley says. 

Avoid Capital Expenses 

Although reducing energy consumption 
is great from a green perspective, an even 
more compelling reason for enterprises to 
reduce energy consumption is to avoid the 
capital expenses of building a new data 
center. "If you can improve the efficiency 
of the IT equipment in your first data cen- 
ter, then you don't have to build a new 
one," Stanley says. "If you can delay a 
$100 million data center cost by a year, it 
can help your bottom line a lot." 

In spite of its effects on electricity rates, 
the American Clean Energy and Security 
Act can be an opportunity. "A significant 
portion of emissions reduction can be 
achieved by energy conservation," Winkler 
says. "This bill will drive electricity rates 
up, but if it drives efficiency up, too, then it 
may not drive costs up." 



Direct Implications Of The Act 
For Data Center Owners 



Two sections of the American 
Clean Energy and Security 
Act may directly affect data 
center owners and operators. 
Section 201, "Greater Energy 
Efficiency in Building Codes," 
establishes building energy 
reduction requirements via 
new nationwide building 
codes. These new codes 
mandate a 30% decrease in 
energy use for commercial 
buildings constructed after 
the Act is passed. New com- 
mercial building energy re- 
duction targets hit 50% on 
Jan. 1, 2015. Starting Jan. 1, 
2018, new commercial build- 



ing energy reduction targets 
will rise by 5% every three 
years through Jan. 1 , 2030, 
(55% by 2021 , 60% by 2024, 
etc.). The reductions will be 
measured against energy use 
allowed by pre-act building 
codes. 

Section 202, "Building Retrofit 
Program," will establish a 
national Retrofit for Energy 
and Environmental Perfor- 
mance program. REEP's pur- 
pose is to achieve maximum 
energy use reductions and 
"significant" improvement in 
water use and other environ- 



mental "attributes." REEP 
could, among other things, 
provide low-cost or subsidized 
loans to companies that retrofit 
their buildings by the regula- 
tions. It could also award direct 
financial payments of up to 
50% of retrofit costs. 

For the complete text of HR 
2454, go to energy- 
commerce. house.gov/Press_ 
11 1/2009051 5/h r2454.pdf. 

To track the bill's progress 
through Congress, go to 
www.govtrack.us/congress/bill. 
xpd?bill=h11 1-2454. 
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Digital Medical 
Records 



Assess Their Vulnerability 
To Data Breach 

by William Van Winkle 

The April 23, 2009, memo put out by the 

Oklahoma Department of Human Services 
now sounds unfortunately familiar. A laptop 
was stolen from an employee's vehicle con- 
taining the "names, Social Security numbers, 
dates of birth, and home addresses of clients" 
from a broad range of assistance programs. 
The OKDHS director stated that, "the risk of 
the data being accessed is low because the 
computer uses a password-protected system." 

Perhaps the thief was only looking for a 
notebook to hawk for a couple hundred 
bucks, and whoever fenced it on the street 
had the sense to wipe the hard drive, oblivi- 
ous to what was on it. Or perhaps that data 
is still waiting to fall into the hands of the 



Key Points 



Many healthcare data breaches are the 
result of security policy violations, including 
leaving supposedly secure systems unat- 
tended in the open. 

Once servers are secured, improper use of 
client systems and devices, such as for vis- 
iting unauthorized Web sites or exchanging 
data via insecure flash drives, remains a 
significant risk. 

Changing corporate culture and users' 
awareness of security may be the single 
most important way a company can improve 
its ability to keep health records safe. 



highest black market bidder. A password 
alone won't stop a determined hacker. 

In 2006, the Veteran's Administration had 
a laptop theft in which the stolen PC con- 
tained 26.5 million troop and veteran records. 
The laptop was recovered. Forensics deter- 
mined that the data had not been touched, but 
the VA settled a class action lawsuit over the 
affair for $20 million. According to Kevin 
Prince, chief technology officer at security 
service provider Perimeter (www. perimeter 
usa.com), "Data breaches are almost synony- 
mous with class action lawsuits these days." 
He notes that the average breach costs orga- 
nizations $2.6 million, but even that pales 
alongside what could happen if data sudden- 
ly turns up missing and stolen right when 
doctors need it for critical patient care. 

21st Century healthcare data must be digi- 
tal and portable, but it also must be protect- 
ed. However, many organizations need guid- 
ance on how to safeguard their digital assets 
both during use and after a problem arises. 

Four Risk Vectors 

HIPAA requires healthcare organizations 
to encrypt electronic healthcare data stored 
on open networks and systems. Unfortunate- 
ly, encryption will only work as intended if 
surrounding security policies are maintained. 
One such policy is bound to prohibit leaving 
systems carrying sensitive data unattended 
when in the open, even for a moment. 

"Say somebody has a laptop with an 
encrypted hard drive," says Perimeter's 
Prince. "They're logged in, doing their 
work, and they walk away for just long 
enough for someone to come along behind 
them and swipe their laptop. The data is 
open and unencrypted if they're logged in. 
As long as the computer doesn't turn off or 
require authentication, they can copy out the 
data or do whatever they want." 




A second 
and related risk 
vector deals with 
security policy viola 
tions on proper session 
authentication. "One of the 
biggest stumbling blocks for 
healthcare organizations as they 
move to full digitization is user authen- 
tication," says James Quin, senior 
research analyst at Info-Tech Research 
Group. "If that doctor, nurse, or clinician is 
flitting between all these wards, beds, and 
rooms and accessing systems in all of them, a 
real lack of authentication gets introduced. A 
lot of organizations will use a blank pass- 
word and login. The first person in that 
morning logs in and thereafter everybody 
uses that account, making it very difficult to 
track who did what with any given data. If 
you've got an open system at a nurse's sta- 
tion or in the hallway, anyone walking by 
can access it." 

If this sort of violation sounds too absurd 
to be true, it's not. Such policy breaches 
happen constantly and in many forms, often 
because users work under a false sense of 
security. "Medical people feel like they've 
got safe harbor because they encrypted 
their data," says Bill Hunka, director 
of business development for Absolute 
Software (www.absolute.com). "That's the 
law. But they didn't realize that in New 
York State, the law also says that you need 
to be sure the encryption keys were not 
tampered with. Well, quite often you have 
end users struggling to remember all their 
different passwords. They write passwords 
down on a pad kept with their notebook. Or 
they have the RSA token for identity verifi- 
cation in the laptop bag. It's just the unfor- 
tunate nature of humans in IT." 

The third major risk vector occurs when 
users expose their systems and portable 
devices to unauthorized outside elements. 
The most famous example might be the 
USB flash drive, this decade's equivalent of 
the old virus-infected floppy disk threat. All 
it takes is one plug-in to an infected system, 
then moving that flash drive back onto a 
system tied to the healthcare organization's 
LAN, even if by a VPN connection. All a 
VPN does is make sure no one can snoop 
on the connection between client and server. 

Far less obvious is the newer role played 
by malicious code lurking on Web sites. 
Malicious code can reside on sites intention- 
ally or be hidden as the result of undetected 
hack attacks. According to Perimeter's 
Prince, "In the last year, something like 80% 
of the top 100 Web sites have been compro- 
mised and had malware installed on them for 
a day or several days." This includes general- 
ly trusted sites. When someone visits a site 
containing malicious code, the visiting client 
PC can be compromised and ultimately hand 
over information (including username and 
password) or even full control to a remote 
hacker. As Prince asks, why go through the 



Processor.com 

trouble of coding exploits and breaking 
through a firewall when a hacker can let 
malicious code do his work for him? This is 
why an increasing number of organizations 
are enforcing white rather than black URL 
lists, dictating the few sites a browser can 
visit rather than blocking the few it can't. 

The fourth and probably most dangerous 
risk vector is malicious insiders. According 
to Absolute's Hunka, 30 to 50% of data secu- 
rity breaches are internal jobs. All it takes is 
one disgruntled or even a desperate employ- 
ee feeling today's economic pressures to 
conduct an internal data breach far more 
damaging than any outside hack attack could 
be. This is why access to critical data must be 
confined only to the employees who really 
need it, so as to reduce the risk footprint. 
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Solutions 

The task of safeguarding healthcare data 
can seem daunting if not impossible, but 
there are some basic, even inexpensive steps 
that can be taken to dramatically improve an 
organization's odds against data breaches. 

Perimeter's Prince recommends that all 
enterprises enforce ongoing security train- 
ing — not just once every year or quarter but 
at least one hour every month, with each new 
session covering a new topic. The object is to 
gradually shift the corporate culture into a 
mindset of security and keep end users 
abreast of current risks. It's also equally 
important to test users to make sure the 
teaching is taking root. When Perimeter ana- 
lyzes an organization's security, 75% of end 
users tested will give out their username and 
password information to strangers (Perimeter 
representatives purporting to be someone 
else) over the phone. So the most important 
thing is to keep educating. "If anyone goes 
into security thinking they're going to do X, 
Y, and Z and be done, they're hosed," says 
Prince. "They'll eventually be hacked and 
breached and wonder how it happened." 

After training and cultural security aware- 
ness, look for ways to improve the security 
of client systems. Much of IT's security 
focus stays on servers. But all it takes is one 
compromised client to create a data breach 
firestorm. Software-based encryption is 
widely considered to be inferior to hardware- 
based encryption that resides within the hard 
drive. Until recently, there was no industry 
standard for such encryption, but now the 
Trusted Computing Group has finalized its 
"Opal" specification. With Opal, all data on 
the drive, even the base OS files and MBR 
(master boot record), is encrypted from the 
moment of installation. Because encryption 
is handled by a processor within the drive, 
there's no impact to system resources and no 
way for users to not enable the security. 

"Protecting consumers' health information 
now is much easier and efficient because of 
the growing availability of self-encrypting 
drives that do strong encryption on the fly, 
all the time, and in a way that the data can- 
not be attacked," notes Brian Berger, direc- 
tor of the Trusted Computing Group (www 
.trustedcomputinggroup.org). "These drives 
are available as a factory-installed solution 
from many OEMs and are relatively inex- 
pensive. We're seeing the healthcare market 
adopting and rolling out fully encrypted 
drives in data centers, notebooks, and desk- 
top PCs used by doctors and their staffs, at 
little incremental cost and with no change of 
behavior for the users." 



Protect Data On Laptops 



The physical cost of a stolen 
laptop is a fairly minor concern 
to most organizations. It's the 
data on the laptop that matters. 
But without having the system 
in-hand for analysis, you won't 
know if patient records have 
been compromised or not. This 
is why recovery of the note- 
book can be so critical. 



Along with Trusted Computing 
Group's Opal specification, 
consider adopting client sys- 
tems that leverage a hard- 
ware-based security platform. 
Recovery applications can 
work to identify a stolen laptop 
when it logs in to the Internet 
so it can be traced. Even if the 
hard drive gets wiped and 



overwritten, such applications 
still work. Admins can remotely 
block access to the system's 
encryption keys, making data 
inaccessible, or even block the 
OS from booting. Combining 
such technology with encryp- 
tion greatly increases the odds 
that thieves will be left with no 
valuable data. 



Google 

To Battle Microsoft 
On Netbook Front 

Although Google's recently announced open- 
source Chrome OS won't be in consumers' 
hands until the second half of 2010, the "light- 
weight," Web-centric operating system is 
being called everything from a potential secu- 
rity and privacy risk to a revolutionary devel- 
opment that could alter the course of comput- 
ing forever. 

For its part, Google, which will initially target 
Chrome OS at netbooks and later take aim at 
desktop PCs, is billing the OS as a natural 
extension of its Chrome Web browser, which 
the company launched about 10 months ago. 
Google is building Chrome OS on a simple 
architecture that runs the OS "within a new 
windowing system on top of a Linux kernel," 
the company says. The Web will serve as 
the platform on which applications such as 
Google Docs will run in an effort to create a 
quicker, streamlined experience for people 
who spend most of their time on the Web. 

Chrome OS's Place In The Market 

Already, Google has announced it is work- 
ing with multiple OEMs to develop Chrome 
OS products. The OS will run on x86 and 
ARM chips, but Google plans to keep 
Chrome OS a separate entity from Android, 
the already-in-use mobile OS that the com- 
pany helped develop for smartphones and 
that Acer will reportedly drop into a new net- 
book for release in late summer or early fall. 

Chrome OS will directly compete with Mi- 
crosoft's upcoming Windows 7 (including a 
Win? version aimed at netbooks) and Moblin, 
the Linux-based mobile project that Intel is 
backing. Although Rob Enderle, tech analyst 
with the Enderle Group, views Google's ven- 
ture with Chrome OS as a positive due to 
Microsoft being "vulnerable right now," he 
believes that "ideally, [Google] would have 
wanted to come to market this year" in 
advance of Windows 7, as "Vista has a bad 
rap" and Google could have "hit Microsoft 
when it was weakest." As for Moblin, Enderle 
believes "Intel is treating Chrome OS as a 
complementary move," with Chrome OS 
residing on top of Moblin. 

If Google can get Chrome OS up and run- 
ning, Enderle says, the OS could have an 
impact in the business and consumer sec- 
tors. "The question is: Can Google get 
enough product in the market to make a 
difference?" Enderle says. "If [Chrome OS] 
does go, it has benefits to both consumers 
and businesses." 

Google has stated it plans to release Chrome 
OS software to the open-source community 
later this year with the intent that "all Web- 
based applications will automatically work 
and new applications can be written using 
your favorite Web technologies." Google has 
also stated that Chrome OS will work with 
other Web browsers besides Chrome. 



by Blaine Flamig 




Page 36 



Processor.com 



July 31,2009 



News 



I Beware SMS Scams 

According to a recent scam report from 
Cisco Systems, text message scams are 
becoming more prevalent. The most com- 
mon SIVIS-based scams are forged to look 
like they came from a bank. These mes- 
sages commonly prompt recipients to call a 
telephone number and enter login details, 
account numbers, PINs, and passwords, or 
they provide a URL to a phishing site that 
prompts visitors to input their sensitive infor- 
mation. Banks that have been targeted 
include First Community Credit Union, 
Buffalo Metropolitan Federal Credit Union in 
New York, and BCT Federal Credit Union in 
New York and Pennsylvania. 

I SSD Prices Rise 

According to market research from iSuppli, 
higher prices for NAND-type flash memory 
have reduced the once-promising market for 
SSDs in notebook PCs. The average price for 
a 16GB MLC (multilevel cell) NAND flash 
increased to $4.10 in the second quarter, up 
from $1 .80 in the fourth quarter of last year. 
iSuppli says NAND flash suppliers cut capaci- 
ty last year to reflect weak market demand, 
which caused prices to rise even though 
sales were still weak. 




I IBIVI Announces 

Data IVIasking Technology 

IBM has introduced Magen, or Masking 
Gateway for Enterprises. The proof-of-con- 
cept technology is engineered to guard confi- 
dential data without changing the data files. It 
seizes sensitive information prior to reaching 
users' screens, and it operates with an in- 
stalled server next to an existing server and 
client applications. Magen utilizes optical 
character recognition technology to discover 
the sensitive and unreadable images, and 
then it covers the data with a mask. This pro- 
gram is specifically designed for industries 
such as health care that deal with a lot of 
sensitive information but need to sometimes 
share information internally or externally. 

I Popularity Of Mobile Banking 
Growing 

According to a Mobile Financial Services 
Market report from comScore, users prefer to 
access mobile bank accounts from home on 
their smartphones rather than on a PC. More 
than 30% of those surveyed say they perform 
this task from home, while 25% log on to 
mobile accounts when running errands. 
comScore's study shows 44% of smartphone 
users report banking through an Internet 
browser and 40.6% access accounts through 
applications. For customers on 3G networks, 
the percentages were somewhat higher. 
comScore also revealed that 25% of mobile 
bankers utilize text messaging to access 
financial accounts. 

I JavaScript Vulnerability 
Reported In Firefox 3.5 

Security firm Secunia has reported a zero-day 
flaw in Firefox 3.5's Just-in-time JavaScript 
compiler. Rated as "highly critical," this defect 
could attack as a poisoned Web page that 
uses malicious code to disable a new Java- 
Script processing feature. The Mozilla security 
blog offers a workaround option to disable the 
JIT compiler. The blame is placed on the 
TraceMonkey add-on, designed to increase 
browser performance. Firefox 3.0 users should 
not be concerned, but current Firefox 3.5 users 
are advised to disable JavaScript. 



Aging Data 
Centers : A Plan 



Breathing New Life Into Elderly Spaces 
luires Solid Strategy 




Reqi 



by Christian Perry 



Some things get better with age. But 
while wine and wisdom can benefit from 
years gone by, data centers generally take 
the opposite route, struggling through grave 
challenges in processing, power, space, and 
other areas over time. Industry experts esti- 



Key Points 



As servers continue to shrink, demands for 
power and cooling expand, in turn placing 
an increasing burden on older infrastruc- 
ture designed to handle less-demanding 
servers. 

Adopting a regular equipment refresh 
schedule can help to keep data centers 
current and spread the costs required for 
that new equipment over longer periods. 
Data centers in certain segments, such as 
education, can find it more difficult to justify 
upgrades, but good practices go a long way 
toward boosting the overall effectiveness 
and efficiency of legacy infrastructures. 



mate that the average age for data centers 
today is 12 years, which represents an eter- 
nity in terms of technology and the infra- 
structure required to support it. 

"Today's servers have tremendous pro- 
cessing capabilities but require more elec- 
tricity and generate more heat than what 
legacy data centers were designed to sup- 
port. Consider that 12 years ago, data cen- 
ters were being designed with about 50 
watts per square foot of cooling, while 
today, 200 watts per square foot is typical, 
and designs of 500 watts per square foot 
aren't unheard of," says Douglas Alger, IT 
architect for physical infrastructure at 
Cisco (www.cisco.com) and author of 
"Build the Best Data Center Facility for 
Your Business." 

Moreover, shrinking servers result in 
more equipment packed into cabinets, in 



Growing Old Isn't Easy 



turn boosting power and cooling demands, 
overwhelming an older data center's cable 
management system, and even testing the 
weight-bearing limit of floors, Alger says. 
Add to that the overall less-efficient designs 
of older data centers, which often lack hot 
and cold aisles and other cooling and power 
optimization features, and you quickly have 
IT teams scrambling for solutions. 

Stay On Schedule 

Most data centers are well aware of the 
aging environments around them, but tar- 
geting potential age-related problems while 
dealing with day-to-day business require- 
ments can be difficult. Matt Kightlinger, 
director of solutions marketing for the 
Liebert Products business of Emerson 
Network Power (www.liebert.com), notes 
that data center managers have a tendency 
to be a little slower in making infrastruc- 
ture investments, but that practice can 
prove costly. 

"A regular equipment refreshment 
schedule is important. If [data centers] 
spread out the expense over time, they can 
keep their IT systems relatively current. I 
would also suggest keeping the big picture 
in mind. For example, considering a room- 
level UPS may mean a larger initial 
investment, but it would be scalable 



zations can painlessly implement them. 
"There's no downtime — you just introduce 
them as part of your company's normal 
hardware refresh cycle. You lighten the load 
on your older data center's electrical infra- 
structure and its cooling systems, and — in 
the case of virtualization — you can even 
reduce your cabling density," Alger says. 

Not all attempts at keeping a data center 
current necessarily require equipment pur- 
chases. Because two of the critical issues 
tied to aging are power and cooling, it's 
possible to take simple steps that can pre- 
I vent problems. For example, Alger recom- 
mends boosting efficiency by sealing gaps 
where air can leak out of the data center 
plenum (typically via floor tile cutouts 
where patch cords and other power cords 
pass through), installing blanking panels, 
and neatly routing patch cords so that hard- 
ware isn't obstructed. 

Special Needs 

Data centers in every industry inevitably 
face the trials of aging, but some are more 
sensitive to the effects than others. For 
example, Alger points to organizations in 
the education and government arenas, 
which don't have the profit-driven business 
model of other organizations and can't jus- 
tify infrastructure upgrades to their data 
centers based upon the promise of more 
customer revenue. Joshua Aaron, founder 
of Business Technology Partners (www.btp 
.net), says that some market verticals, such 



"Today's servers have tremendous processing 
capabilities but require more electricity and 
generate more heat than what legacy data 
centers were designed to support." 

- Cisco's Douglas Alger 



J 



and more cost-effective in the long run," 
Kightlinger says. 

When introducing hardware, Alger 
suggests choosing energy-efficient systems 
and virtualized servers, because IT organi- 



Aging data centers might 
exude a bit of old-style charm, 
but they can be logistical night- 
mares otherwise. Randy Scott, 
senior vice president of critical 
facilities and infrastructure for 
Skyline Construction (www.sky 
lineconst.com), identifies the 
primary challenges faced by 
older data centers. 

Risk. The upgrade/retrofit of 
older data center equipment 
can involve considerable risk 
and potential impact to exist- 
ing data center operations 
resulting from an "incident" 
(an event in the implementa- 
tion of work that could result in 
an inadvertent impact to busi- 
ness operations or business 
continuity). Such incidents 
could occur when working 
above live racks, tying new 
equipment to existing EPO 
(Emergency Power Off) 



systems, controlling dust and 
smoke, interfacing with fire 
protection and fire suppres- 
sion systems, and depending 
on systems that have not 
been regularly maintained. 

Cost. Given the nature of the 
risk, upgrade work (scope vali- 
dation costs, infrastructure 
investigations, limited work 
windows, contingency plan- 
ning, premium work hours, 
cutovers, powerdowns, and 
temporary provisions during 
critical work activities) in older 
data centers can be more 
costly to implement. 

Short-term solutions. As 

older data centers near the 
end of their useful lives, work 
efforts may be influenced by 
limited lease terms, desire for 
minimal investment, and a phi- 
losophy to get just a little more 



life out of the facility or equip- 
ment. Challenges can arise 
should short-term installations 
become long-term solutions. 

Staffing changes. Should 
older data centers go through 
multiple staffing changes, con- 
sistency of individuals with a 
thorough historical knowledge 
of the facility may be limited 
and challenging to implemen- 
tation work efforts. 

As-built documentation. In 

older data centers, should the 
as-built documents, mainte- 
nance records, etc., not be 
currently maintained, the 
implementation of work in 
these environments becomes 
more challenging, risky, and 
time-consuming, as the 
implementation team must 
expend more time in prework 
validations. 



as financial services and health care, are 
nonetheless consistently under the gun to 
keep their infrastructures up-to-date. 

"[They] have more rapidly advancing 
needs in storage and processing power 
and tend to be faster adopters of new 
technologies to meet these needs," Aaron 
says. "This means that their core data cen- 
ter infrastructure often has a shorter shelf 
life between each new iteration than in 
some other industries, such as education 
and government." 

Christoph Wilfert, general manager of 
SMB solutions for Microsoft, agrees, 
explaining that "the extraordinarily high 
demands on the data center in today's 
healthcare environment can limit IT man- 
agers' options as a result of 24/7 system 
availability requirements and privacy stan- 
dards. In education, IT managers face 
administrative peaks as the student popula- 
tions turns over," he says. 

Regardless of the industry, meeting 
aging-related problems head-on with best 
practices can help to diminish their effects. 
Alger reminds us that all data centers need 
proper monitoring and management, but 
legacy environments require extra attention 
to avoid overtaxing their resources. After 
all, just because there is an available elec- 
trical outlet or cabinet space doesn't mean 
there is adequate power and cooling to sup- 
port more hardware. "Assuming there is 
can lead to a tripped electrical circuit or a 
hot spot that is detrimental to hardware 
over time," he says. 
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Slow Wheels, 
Fast Payback 

Energy Recovery Wheel Technology 
Boosts Data Center Efficiency 



by Curt Hurler 

Energy recovery wheels are an estab- 
lished technology in many markets, and 
now they are gaining popularity in data 
centers. These wheels rotate between a data 
center's incoming outdoor air and the out- 
going exhaust air, transferring some of the 
heat and moisture from one airstream to the 
other, depending on the season. Therefore, 
the incoming air is preconditioned, increas- 
ing the data center's energy efficiency. 



Key Points 



Energy recovery wheels transfer heat and 
moisture from a data center's incoming and 
outgoing air, preconditioning the air and 
increasing efficiency. 

Energy wheels can be used year-round in 
a variety of climates. 
Payback on energy recovery wheels can 
be as quick as one year but more typically 
three years. 



Sean Stephansson, Atlanta-based sales 
engineer for NovelAire Technologies 
(www.novelaire.com), says energy recovery 
wheels are a natural fit in any application 
where outdoor air is taken into a condi- 
tioned space. No matter what the applica- 
tion, there will be warm air that either is 
allowed to drift out of the building or is 
exhausted under positive pressure. Energy 
recovery wheels take that energy and turn it 
to good use. 

Wheels can transfer both heat and water 
vapor, says John Murphy, application engi- 
neer at Trane Commercial Systems (www 
.trane.com). This makes them valuable for 
humidifying air coming in during cool, dry 
weather or dehumidifying air during warm, 
moist conditions. "In humid climates, there 
are benefits to looking at total energy 
recovery," he says. 

There are three general classes of wheels: 
sensible, enthalpy, and regeneration. The 
first two are appropriate for data center 
applications. 

Sensible wheels are not coated with a des- 
iccant to remove moisture. So, they transfer 
only sensible energy (heat). Basically, they 
transfer energy between two air streams with 
the air in one stream gaining or losing heat to 
the air flowing in the opposite direction (see 
"How Energy Recovery Wheels Work"). 

Enthalpy wheels are similar to sensible 
wheels, except there is a desiccant on the 
wheel's surface. This allows the enthalpy 
wheel to deal both with sensible energy and 
humidity. 

Regeneration and desiccant dehumidifi- 
cation are typical applications for control- 
ling indoor relative humidity. The regener- 
ation wheel is found mostly in industrial or 
site-specific applications such as indoor 
pools, not data centers. 

Climate Factors 

Stephansson says sensible-only systems 
typically find a home in the southwestern 
part of the country where summer condi- 
tions prevail and desert air brings low 
humidity into the air-conditioning system. 

"In those cases, you can do a sensible- 
only system and gain the benefits of mov- 
ing the dry outside air (across the system)," 



I he says. On the humid Eastern Seaboard, 
they are not as effective. 

Enthalpy systems, often called total ener- 
gy systems, will reject some of the mois- 
ture that comes in with outdoor air. 

"The exhaust will suck up the undesir- 
able moisture that could have the negative 
effect of raising the indoor relative humidi- 
ty," Stephansson says. 

Although Stephansson says there are a lot 
of standard dehumidification technologies 
available — think about the standalone dehu- 
midifier used in many basements — an ener- 
gy wheel will do the job more efficiently. 
Since they both temper the air and dehumid- 
ify, energy wheels provide a greater return 
on investment than an electronic system. 

Stephenson says energy wheels can be 
used year-round. In colder areas of the 
country, where the weather gets harsh, frost 
might develop on the wheel. If the wheel 
cools down below 32 degrees Fahrenheit, 
moisture from the exhaust stream will 
freeze. Although such frost should not 
damage the wheel, it will reduce airflow. 

Good management is the solution. "The 
most common way is to reduce the capacity 
of the device," Murphy says. A bypass 
damper will shunt air around the wheel, 
reducing the amount of cold air on the wheel. 

Many manufacturers offer a heater to 
provide optional preheat treatment of the 
cold air coming from outside. This keeps 
the exhaust air from freezing. 

Murphy, who designs such systems for a 
living, says the solutions are "very well 
understood as long as the people who are 
designing the system do it correctly." 

A data center packed with servers typical- 
ly cools air year-round, even in the frigid 



upper Midwest. "You can use the system to 
temper or slightly raise the temperature of 
the outdoor air," Stephansson says. He 
notes that vendors typically sell additional 
packages that allow rotary systems to do 
air-to-air heat exchange efficiently. 

Energy Wheel Payback 

Energy recovery wheels promise to 
return their investment in three years or 
less, depending on where the data center is 
located. And, although payback is fast, 
these wheels turn at about the speed of old 
vinyl records: 25 to 50rpm. 

"You'll always see a short return on 
investment to implement energy recovery 
on your exhaust air," Stephansson says. 
"Three years is the maximum. In a highly 
conditioned situation, like a data center, the 
payback can be as quick as one year." 

Murphy says payback varies with the 
data center's climate. "The more extreme 
the weather, the faster the payback," he 
says. That holds true whether it is extreme- 
ly hot and dry or cold and humid. Another 
factor in payback time is the amount of air 
transferred through the data center. 

Good To Go 

Data centers only recently began using 
energy recovery wheels, but the technology 
is mature. 

"It's been around a long time," Murphy 
says. "It is well-documented and well- 
understood. It is just that the data center is 
a new market that has not looked at this 
technology. It only requires proper installa- 
tion, maintenance, and control." 

Maintenance is straightforward and sim- 
ple. Stephansson says the maintenance 
schedule is similar to that used for filter 
maintenance or for keeping the coils clean. 
On some systems, there is a once-a-year 
requirement to grease bearings. Murphy 
would add a check of any belts at the time 
of cleaning or vacuuming the coils. 

SMEs in the market for energy recovery 
wheels should check the AHRI (Air 
Conditioning Heating and Refrigeration 
Institute) Web site (www.ahrinet.org). 
AHRI offers a certification program for 
energy recovery equipment. Participating 
manufacturers have to regularly submit 
equipment for testing, and the AHRI certi- 
fies performance. 
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How Energy Recovery Wheels Work 



Cool Air/Summer 




Cool Air/Winter 
To Outside 



Warm Air/Winter 
To Space/Equipment 



Image courtesy NovelAire Technology. 



Energy Wheels For Backup 



One of the biggest fears in any data center is 
loss of temperature control. Energy recovery 
wheels can help allay that fear. 

"You can look at this technology as another sort 
of backup capacity," says John Murphy, appli- 
cation engineer at Trane Commercial Systems 
(www.trane.com). It is a low-tech way to get a 



high-tech result. "If you are in a very hot or very 
cold climate and something fails, this will contin- 
ue to operate." 

Murphy concedes that it will never do the whole 
job, but he says that a good energy recovery 
system will provide a buffer. "It'll help keep you 
from falling off the map," he says. 



I Broadcom Drops Emulex Bid 

Semiconductor manufacturing company 
Broadcom announced it will drop its bid to 
buy Emulex, a maker of storage networking 
controller chips. The buyout would have pro- 
vided Broadcom with the technology neces- 
sary to develop converged storage and net- 
working products for enterprise networks. In 
April, Broadcom made an offer of $9.25 per 
share for Emulex and, in June, upped the 
offer to $1 1 per share. Emulex says even the 
higher offer undervalues the worth that it 
would bring to Broadcom, and its board unan- 
imously voted to pass on the deal. 

I Intel Posts Quarterly Loss 

Intel posted a quarterly loss of $398 million 
during the second quarter. It's the chip mak- 
er's first loss in 22 years. However, the loss is 
due in large part to a $1 .45 billion fine the 
chip maker had to pay the European Union in 
May for what the EU claims were illegal re- 
bates. Intel's quarterly revenue dipped to $8 
billion from $9.5 billion in the second quarter 
of last year. Overall, the latest numbers from 
Intel still beat Wall Street expectations. 




i 




I Study Shows CEOs 

Too Complacent On Security 

A survey conducted by the Ponemon Institute 
on behalf of security vendor Ounce Labs 
determined that CEOs are a little out of touch 
with their companies' security. Compared to 
other C-level executives, most CEOs tend to 
underestimate the risks of hacking, with near- 
ly half under the impression that attackers 
rarely try to access their businesses' sensi- 
tive data. The survey also found that not only 
do CEOs tend to be more confident in the 
data security of their organizations, but that 
they are also much less aware than other C- 
level execs of attacks that have already 
occurred. 

I Netbooks To Outpace Notebooks 
In Sales 

Notebook sales are starting to flatten out as 
more consumers opt for netbooks instead, 
driving netbook sales up. Market researcher 
DisplaySearch is predicting that netbooks will 
capture 20% of the portable computer market 
this year, with sales of about 33 million units 
expected— more than double last year's 1 6 
million. On the other hand, 
sales of notebooks are pre- 
dicted to reach about 129 
million units, holding steady 
from last year. Altogether, 
the mobile computing market 
is predicted to rise 11.1% 
year-over-year. 
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I Microsoft Answers Google Docs 

Viewed as an answer to Google Docs and 
other Web-based office productivity apps, 
IVIicrosoft announced it will release its own 
free online office apps under the Office Web 
title. The launch of Office Web will coincide 
with Microsoft's release of Office 2010, set for 
the first half of next year. Office Web, which 
will be available at Microsoft's Windows Live 
portal, will consist of Word, Excel, Power- 
Point, and OneNote applications. Although 
the apps will run from within a Web browser, 
they reportedly omit various high-end fea- 
tures contained within the offline versions of 
Office 2010 apps. However, Microsoft will 
give its 90 million high-volume business 
Office subscribers free access to Office Web 
as well as the ability to host Office Web apps 
on corporate servers. 

I Sprint & Ericsson Strike Network Deal 

Sprint announced it will transfer operation of 
its network to Ericsson as part of a seven-year 
deal worth $4.5 billion to $5 billion. Under the 
agreement. Sprint will retain full ownership 
and control of its network, but Ericsson will 
assume day-to-day network maintenance 
operations. Ericsson will also take on 6,000 
Sprint employees. The move is meant to cut 
spending and curtail the loss of subscribers to 
Sprint's cell phone services. Sprint says the 
deal will free money it can use for prod- 
uct development and improving its 
network coverage and 
quality. 




I Former Microsoft Exec 
Appointed To FCC 

Steven VanRoekel, who has more than 18 
years of experience in IT and management, 
has been named the managing director of the 
FCC by new Chairman Julius Genachowski. 
VanRoekel was with Microsoft for 15 years, 
serving in a variety of positions, including 
managing a Web services team, acting as a 
speech and strategy assistant to Bill Gates, 
and, most recently, holding an executive 
position in the Windows and Tools division. 
Genachowski, who also appointed former 
Maryland Attorney General staff member 
Austin Schlick as general counsel, believes 
the management and legal talents of the 
appointments will serve the FCC well in its 
effort to reinvigorate its internal operations 
and work toward new policies. 

I Consumers Want 
Mobile Convergence 

A new study from Data 
Development World- 
wide reports that 40% 
of U.S. consumers in 
the market for a new 
mobile device are look- 
ing for one that delivers 
access to multiple ser- 
vices and types of con- 
tent. Most popular are smartphones and 
ultra-light notebooks, followed by full-sized 
notebooks, GPS devices, and netbooks. The 
results highlight why many device manufac- 
turers are toying with the notion of wading 
into unfamiliar waters with new product types. 
The study warns that this diversification strat- 
egy has its pitfalls; although consumers have 
expressed a desire for converged devices, 
only those with the right combination of fea- 
tures at the right price will win in the long run. 




Cutting Costs 
By Reducing 
Printed Output 



Operating Print Devices Is A Significant, 
But Often Unrecognized, Expense 



by Kurt Marko 

Many a cynic has quipped that despite 
early optimistic predictions of the paper- 
less office, computers have become the 
most efficient paper generators since 
Gutenberg. Studies have found that compa- 
nies routinely spend 2 to 3% of their annu- 
al revenues on documents and related 
expenses, with printers, supplies, and sup- 
port accounting for 10 to 20% of the typi- 
cal IT budget. Yet printing remains a criti- 
cal element of many business processes, 
and there's nothing like paper for docu- 
ment portability and convenience. 

Tom Codd, HP's director of Imaging and 
Printing Group worldwide sales and ser- 
vices, says that in most cases, IT has no idea 
how much a company is spending on print- 
ing, while Jim Joyce, Xerox's senior vice 
president of Enterprise Print Services, says 
companies typically underestimate their 
actual printing expenses by 30 to 40%. But 
John Hankins, managed print services exec- 
utive at InfoPrint Solutions (www. info 
print.com), says this past year's economic 
crisis and the concomitant squeeze on IT 
budgets has meant a new focus on printing 
costs. It's a target-rich environment. 

According to Elise Min, research consul- 
tant at Info-Tech Research, "The average 
output fleet presents a low-hanging oppor- 
tunity for most IT departments to realize 
savings of 20 to 30% that directly impact 
the bottom line." IDC Research found that 
"companies that have implemented a total 
print management plan have achieved 
direct cost savings of between 8 to 41% 
and significant indirect cost savings." 

Output Fleet Cost Drivers 

One reason printing costs fly under IT's 
radar is that manufacturers have been suc- 
cessful in driving down hardware prices. 
InfoPrint' s Hankins says hardware acquisi- 
tion is only about 15% of the total enter- 



Key Points 



The aggregate costs from deploying, 
supplying, and managing various output 
devices can represent 2 to 3% of a 
company's revenues and more than 10% 
of IT'S budget. 

Most enterprise output environments are 
overprovisioned and unmanaged and rep- 
resent an easy source of cost savings 
through device consolidation and closely 
matching device capabilities to business 
requirements. 

Multifunction laser printers represent the 
foundation of an output device optimization 
strategy and can also facilitate digitization 
of paper documents to create paperless 
workflows. Managed print services can 
help improve output fleet design and on- 
going device and supplies management. 



The least expensive printer is no printer, so tlie 
ultimate means of output cost reduction is 

redesigning business processes and workflow 
to use digital documents ratlier than paper. 



prise printing cost, with HP's Codd adding, 
"The cost of putting marks on paper" is 
only one-tenth of the total document man- 
agement lifecycle expense. Personal printers 
are often vastly underutilized, with Joyce 
noting some of Xerox's audits finding print- 
ers with usage less than 0.25% of capacity. 

Info-Tech's Min says the biggest printing 
cost drivers are consumables (paper, ink, 
toner, and the like) and maintenance, with 
the consumables' costs heavily influenced 
by print technology. She notes that an 
Inkjet's CPP (cost per page) is about four 
times that of laser printers, with an analysis 
by HP showing that the CPP for color 
lasers is more than five times that of black- 
and-white. 

Paper also represents a non-trivial 
expense. Codd notes that a simple change 



such as using duplex printing can save 
about 25%. Likewise, laser printers with 
their heated fusers can suck power — more 
than 500 watts when printing and even 10 
to 20 watts in standby. Thus, Codd says a 
consolidated print environment can save 
40% in energy costs alone. 

Codd and Hankins both point to the hid- 
den or indirect costs of a large, inefficient, 
heterogeneous, and complex printing envi- 
ronment. These include such issues as 
increased help-desk calls, procurement and 
management of supplies, and the need to 
administer a range of device drivers and 
train employees on a variety of printer user 
interfaces. 

Identifying Inefficiencies ' 

Codd says HP uses a three-step process 
to reduce printing costs and enhance 
effectiveness. First, optimize the infra- 
structure by matching capabilities to busi- 
ness requirements; next, actively manage 



the environment; and, finally, look at 
ways to streamline business workflows 
with digital documents. 

Optimization begins with understanding 
what's already installed, which is why Min 
says a fleet inventory is a necessary first 
step. This can be automated by using exist- 
ing network monitoring tools or with spe- 
cialized print management software, but it 
should be augmented with a physical walk- 
through of the office environment. The 
inventory should record both the number 
and types of devices and their usage vs. 
capacity, e.g. monthly page counts vs. 
printer duty cycle or recommended volume. 
Codd says enterprises should strive for a 
ratio of 10 users per device. 

In addition to targeting underutilized 
printers, Min also says the inventory should 
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identify older, less efficient devices or 
those that have generated help-desk tickets, 
because these are both more costly to oper- 
ate and create administrative overhead. 

Along with a device inventory, Min rec- 
ommends an assessment of user require- 
ments, with the caveat that it's important to 
distinguish between needs — concrete 
requirements driven by business process- 
es — and wants. 

The device inventory and user require- 
ments serve as basis for a redesigned, con- 
solidated output device architecture. Joyce 
says a common design is the hub-and- 
spoke model, where hubs of higher-capaci- 
ty and throughput multifunction printers 
combining printing, scanning, digital docu- 
ment sending, copying, and faxing in a sin- 
gle unit may serve an entire floor or 
department, with spokes of smaller net- 
worked printers shared by a workgroup, 
offering convenience. 

Having deployed an optimized print 
environment, ongoing IT management is 
critical to keeping it that way and avoiding 
what Codd calls "printer creep." Depending 
on the output fleet' s size and complexity, it 
may be more cost-effective and sustainable 
to outsource management to a service 
provider. Service providers also offer pro- 
curement options such as equipment leas- 
ing or utility billing, in which the provider 
owns and operates the entire infrastructure 
and charges by the page. 

Going Paperless 

Of course, the least expensive printer is 
no printer, so the ultimate means of output 
cost reduction is redesigning business 
processes and workflow to use digital docu- 
ments rather than paper. Rather than paper- 
less, Joyce says a more realistic goal is 
"paper-less" through opportunistic digitiz- 
ing of formerly printed information. Codd 
notes that an optimized output fleet, using 
MFPs, can facilitate such efforts because 
MFPs are easily integrated with existing 
document management, email, or network 
fax systems, allowing scanned documents to 
be sent directly to file archives, email 
addresses, or even FTP sites. 



Cost Reduction 
Tecliniques 



Short Term: Quick Implementation 

• Ban inkjets 

• Centralize printing and remove as many 
personal printers as feasible 

• Set printers to double-sided and mono- 
chrome by default 

• Send print jobs to lowest-cost devices by 
default 

• Educate users on cost-reduction behaviors 
such as not printing graphically dense doc- 
uments and using the print area wisely 

• Enable aggressive energy-savings settings 

IVIId-Term: Easy & Sustained Savings 

• Centralize, consolidate, and replace older 
devices with multifunction devices 

• Use a management console to enable 
print roaming and identity verification 

• Set up user accounting or quotas 

• Renegotiate and consolidate printer ser- 
vice contracts; leverage size and central- 
ization 

• Train users on hardware self-support to 
reduce vendor or help-desk calls 

Long-Term Tactics: 
Invest For Future Savings 

• Move to a utility printing model 

• Invest in a dedicated print management 
application to streamline printer manage- 
ment and enable granular cost control 

• Outsource highest-cost print services 

Source: "Reducing Cost-to-Serve: Print Services"; Info-Tech 
Research Note by Elise Min; May 6, 2009. 
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I Three Questions | 



Voraciously Defending 
Your Enterprise Network 



Barracuda Networks Helps SMEs Protect Against 
A Multitude Of Network Concerns 

by Joseph Pasquini 

Founded in December 2002, Barracuda Networks (888/268-4772; www.barracudanetworks 
.com) has rapidly grown to become a global leader in content security appliances designed to 
protect all types of enterprises from the litany of threats naturally posed by email, Internet 
browsing, and instant messaging activities. Since then, the technology powerhouse has expand- 
ed its portfolio to include networking products that improve application delivery and network 
access as well as solutions for message archiving, backup, and data protection. 

Stephen Pao is Barracuda's vice president of product management. With 
more than 15 years of experience in the technology sector under his belt, 
Pao is responsible for strategic product direction, definition, and program 
management for all of Barracuda's product lineups. 



upgrades by offloading content security 
and file archive processes to dedicated 
appliances. 

■ What should Processor readers know 
about your company's products? 

"With strong roots in security, we have 
expanded our footprint to also offer prod- 
ucts in both the networking and storage are- 
nas," says Pao. "In networking. Barracuda 
Networks offers the Barracuda Load 
Balancer, Barracuda Link Balancer, and 




NETWORKS 



■ What are the biggest IT-related 
issues facing today's small to midsized 
enterprise? 

"Today, the most popular topic of con- 
versation in both business and cocktail par- 
ties alike is the economy," says Pao. "The 
so-called 'annual budget review' is no 
longer happening annually; it's happening 
every time we get an invoice. We are all 
being tasked by our organizations to look 
for opportunities to reduce operating 
expenses across the board." 

He continues, "The challenge for IT or- 
ganizations in small to midsized enterprises 



is how to continue to se- 
cure the organization while 
reducing hard-dollar oper- 
ating expenses. Both Barra- 
cuda Networks and our resellers have been 
engaging with our customers about how to 
shrink capital expenditures in a number of 
ways." 

According to Pao, some of the ways 
SMEs can grapple with today's economic 
challenges include reining in licensing 
fees, better managing Internet bandwidth 
via Web filtering and leveraging low-cost 
ADSL line aggregation, and stretching 
time frames between server hardware 



Barracuda SSL VPN. For storage and com- 
pliance. Barracuda Networks offers the 
Barracuda Backup Service and Barracuda 
Message Archiver." 

He continues, "Each of our nine product 
lines includes several models to meet the 
needs of any size organization. For exam- 
ple, the Barracuda Spam & Virus Firewall 
100 serves organizations of 50 users or 
less, and the Barracuda Spam & Virus 
Firewall 1000 can filter email for up to 



100,000 users in a single appliance. 
Multiple appliances can be clustered for 
further scalability." 

To better share information with its cus- 
tomer base, as well as with the Internet 
security community in general. Barracuda 
Networks has developed its Barracuda 
Central operations center. Operating 24 
hours a day. Barracuda Central monitors 
and analyzes Internet-based threats in order 
to create definitions for automatic updates 
to be deployed to Barracuda Networks' 
products. 

I ■ What makes your company unique? 

Pao places a strong emphasis on flexibili- 
ty and support. "We sell everything on a 
30-day free evaluation," he says, adding 
that "our main phone number gives you a 
live person — not a phone tree — with sup- 
port experts available 24/7." 

Additionally, Pao says, 
his company focuses on the 
product experience as a 
whole, including affordabil- 
ity, ease of deployment and 
use, and the service behind 
the product. He points out 
that Barracuda's products 
are ready to go right out of 
the box, with no software to 
install or modifications to make, meaning 
the whole thing can be set up and ready to 
go in minutes. Additionally, the Web inter- 
face eliminates the need for solution- specif- 
ic expertise. 

"Our customers have favored the econom- 
ics of buying Barracuda Networks solutions, 
too," Pao says. "Our appliance pricing leads 
the industry in value, and we've broken the 
mold in licensing models by not charging 
per-user or per-server fees." 



WE BUY TAPE! 

DLT-LTO-AIT-AME-DDS-QIC-3480-3590-9840-Etc. 

New & Used - All Types of Data Tape Media 
Certified DATA DESTRUCTION Assured 

World's #1 Tape Buyer is The Data Media Source 
Highest values paid - Free pick-up at your site 
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1-800-252-9268 | www.datamediasource.com 



Magnext Ltd 

7099 Huntley Rd, Suite 104 
Columbus, OH 43229 



DATA BACKUP SOLUTIONS 



Toll-free: 888-NOW-TAPE 
614-433-0011 
www.magnextxom 

MAGNEXT serves the needs of businesses, large & small, throughout the USA and 
internationalty with: New & refurbished tape libraries; Hard-disk based backup solutior^s; 
Library upgrade packages for higher performance & capacity; Professional repair services- 
stock lOOO's of parts 



SUMMER LIBRARY SPECIALS 



• SUIM-STK L20 Tape Library, lxLT03 LVD SCSI Drives (New drive, refurbhhed chassm, with warranty) _ 

* HP MSL404S Tape Library, lxLT02 Drives (New chassis & drive, with warranty] 



HP MSL6030 Tape Library, 2xLT03 SCSI Drives (New drives, refurbished chassis, with warranty) . 
SUN-STK LSOTape Ubrary, 2xLT03 LVD SCSI Orwes (New cha&sts and drives, with warranty) 



• SU N-STK SL8500 Enterprise Tape Li brary, 8xLT04 4G FC Drives {New drives. Refurbished chassis, with warranty) _ 

• SUN L180/L700 Library Upgrade: NEW LT04 4G FC Drive module, includes library controller 
card with NEW 3.18.02 firmware (in exchange) to support LT04, with warranty 



SUN-STK SL500 Library Upgrade: NEW LTQA 4G FC (LTO4-HP4FC-SL500Z) {new w/warranty) 

MEDIA HP (C7973A) LT03 Ultrium RW Data Cartridge, 400/800 GB (Brand-New/sealed) 

MEDtA HP (C7974A) LT04 Ultrium RW Data Cartridge, 800 GB/1.6 TB (Brand-New/seaisd) _ 



SPECIAL 

PRICE 

$7,500 
$5,100 
$9,600 
$12,500 
$128,000 

$9,900 
$8,700 
$29.40 
$47.88 



Committed to providing high-value, high-quality, products to the IT marketplace 



Attention Data Center Professionals 



Where do you go to find the 
newest products available? 

Check out each week's issue for . . . 

' Marketplace ads filled with in-depth 
information on new products. 

> Quick rundowns of all new data center-related 
products released in the past week. 

Articles with valuable productoverviews and data. 



. . . then go to Processor.com and take 
advantage of our online search tools to find 
even more in-depth information! 



PROCESSOR 



WANT 
TO BUY 



• HP • COMPAQ • DEC 

• OFF-LEASE 

• SURPLUS/EXCESS 

• END OF LIFE 



(800) 426.5499 TOLL FREE 

(508) 230.3700 LOCAL 
(508) 238.8250 FAX 
info@compurex.com 
www.compurex.com 



SYSTEMS CORPORATION 

Serving the IT Industry 
for 20 Years 




We Buy Used 

Cell Phones 

for each 
^^11 phone! 



&pay 
u p to 



Some pJhones have no value. See current purchase prke 
list for individual model prices at www.paiebutlfr.com 

www.pacebutler.com 

1-800-248-5360 -(405) 755-3131 




Information 
Technology 
Trading 

® — We Buy, Sell and Lease IBM 
®— AS/400 • RS/6000 • Servers 
® — System Upgrades 
® — Advanced 36 Systems 
Tape Subsystems 
Printers, Terminals, Modems 
21 Years Experience 



Ph: (877) 715-3686 ggj 
Fx: (405) 715-3682 SSl 
WWW. itechtrading. com 



We Also Buy 
All Other 
Brands of 
Computer 
Hardware! 
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Opinions 



INFO-TECH • INSIGHT 



Microsoft Project: A Useful Tool For Everyone? 



Microsoft Project leads the market in 
terms of sales and notoriety due to 
branding but not necessarily because of 
software functionality. Although reporting 
and resource management features are fair- 
ly robust, this solution has less to offer in 
terms of structured project management 
functionality and user time-saving features, 
and it is more expensive than most of the 
competition. Regardless, research indicates 
that the majority of new project managers 
are trained on this software. Why is this? Is 
it because Project really is a tried-and-true 
solution within the company or more 
because management is afraid of change? 

Does Easy Integration Make Project 
A Market Leader? 

Why does Project lead the market in 
sales if the features and functions aren't as 
full-bodied or unique as other offerings? A 
quick scour of the Web reveals that Project 
is often chosen for its simple integration 
with the Microsoft Office suite of products. 
However, the downside is that integration 
with other Microsoft software is required in 
order to achieve optimal functionality. 

Is it a good idea to choose software that 
relies heavily on the functionality of interre- 
lated programs? Probably not. But perhaps 
management won't consider alternatives 
because they don't want to start from 
scratch. They don't need to. Microsoft 
Project integration is offered by most of the 
competition. Yes, that means that you can 
export all of the project data you have 
already entered into Project and move it to 



the new software. This limits downtime and 
ensures that project details won't be lost or 
missed during a manual transfer. 

Many competitive offerings also include 
other plug-ins to assist with integration — you 
can still import Outlook contacts, even if the 
software is made by a competing vendor. 
With so many other project management soft- 
ware offerings available in the market, find- 
ing a complete end-to-end project solution for 
small to midsized enterprises 
should not be difficult. 



general. Project sits at a midlevel to high 
ranking against other competitive offerings. 
Visually, the competition is nearly identical. 
Functionally, competitive vendors either 
offer all of the same features with a few add- 
ons or are missing a few nonessential charac- 
teristics. These add-ons can drive better, 
more effective results or can be completely 
unnecessary; it depends on the goals of the 
enterprise. Competitive offerings often 



Other Things To Consider 

Microsoft rarely markets 
Project to large enterprises 
without pairing it with Project 
Server, which can be hosted 
internally or externally and 
costs considerably more than 
Project on its own. The server 
version provides a lot of addi- 
tional functionality, including 
advanced task management and collabora- 
tion, and does not require the Project client in 
all cases. So, part of the missed value propo- 
sition for large companies using Project is 
that they are doing so without the server and 
are thus not realizing full value. For SMEs, 
however. Project Server is often overkill for 
what they actually need. 

Most modern project management soft- 
ware solutions offer similar features and 
functionality at varying price points. 
Although this can be helpful, it can also 
prove difficult when it comes to differentiat- 
ing competing products from one another. In 



Amanda Fink is a research associate with 

o 



Info-Tech Research Group. Fink brings 
< experience in IT quality assurance, testing 
methodologies, HTML authoring, and intranet 
design. Her recent work focuses on advising 
enterprises looking to define and create project 
and testing plans. 




include user-friendly dashboards and quick- 
tabs to improve efficiency, both of which are 
noticeably unavailable in Project. 

Phone and email support can be costly if 
sought directly from Microsoft unless the 
enterprise has a high spend: Support is often 
included in large bundles. However, Project's 
longstanding availability within the market 
has allowed the Web to become an almost 
unlimited alternative resource. Free informa- 
tion and assistance can be found via chat 
rooms, help lines, and forums. This might not 
seem like a key selling point up front, but free 
time-saving resources can help the enterprise 



out of a last-minute bind. Are you looking for 
specific functionality? Ask a stranger from 
anywhere in the world, read a discussion 
forum, access Technet.com — chances are the 
answer is out there. This free support may be 
a key selling point for management because 
new users will require less peer support. 

Worth The Price? 

Notably, Project is a commercial off-the- 
shelf product with a one-time per-license 
cost, which puts it at a higher price point 
than the direct competition. Convenience, 
particularly in terms of easy integration, 
along with readily available 
assistance, may make up the 
difference for some enterpris- 
es. However, SaaS adoption 
rose from 32% in 2007 to 63% 
in 2008. As expectations for 
real-time connectivity and 
worldwide access increase, 
SaaS project management 
solutions will continue to 
grow in popularity for SMEs. 
Generally speaking. Project 
Standard 2007 is not an ideal 
solution if the enterprise requires multi- 
ple users with simultaneous access and real- 
time updating, unless a server solution is in 
the budget. 

So, although a different solution may 
not always be the best choice for the enter- 
prise, why not take a few minutes to test 
out the free trials of the competition? 
Evolving features and delivery methods 
might solve your issues, even if you have 
yet to identify them. 

Send your comments to 
infotech@ processor, com 
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Miss an 
issue? 



Don't have a print 
copy handy? 

Go to Processor.com 
and download the 
entire issue as 
a free PDF. 
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DEC • HP • COMPAQ • SUN • IBM • CISCO • Brocade • McData 



U.S. military-approved repair depot 
Mission-critical supplier to NASA 
VAX End of life fulfillment reseller Compaq Authorized 
Key reactive response supplier to HP field service 24/7 worldwide 
7000 skus and 2 million parts in inventory 

Multimillion dollar test lab with printout diagnostics for each product supplied 
Free Repair Evaluation 



L 




Call Toll Free: 888.332.7278 I In MA: 508.866.1171 I Visit us at www.decparts.com 



This is a small snapshot 
of the 7,000 SKUs in stock 
LARGEST cable inventory 
worldwide: 

DISK & TAPE 

Part Number Price 

RD53-DA $895.00 

RD54-AA $995.00 

RZ29L-AA/VA $175.00 

RZ28-VA $145.00 

RZ1DD-SW/VW $60.00 

RZ28-VA $295.00 

TLZ09-VA $295.00 

TLZ10-VA $385.00 

TZ87/TZ88/TZ89 Starting at $125 

TSZ08-AA $1,995.00 

All VAX Parts & Spares 70% Off Compaq 
Preferred VAX Reseller 



DNPG Network 

DEZ8R-P $1,290.00 

DEFHM-MM $5,800.00 

DEFEA-FB $1,275.00 

DSGGD-BA $1,500.00 

DZRVW Starting at $500 

All Compaq HP Blades 
Start at $595.00 

DS10 $675.00 

DS20 Starting at $11 75 

GS80 $2,900 

GS160 Starting at $3,900 

GS320 Starting at $5,900 

RL01/RL02 Call 

RA60-P $475 

RA81 H.D.A $775 

RA82 H.D.A $775.00 

2T-48VDC $3,400.00 

VAX Systems & Options— Call 



Alphas Starting At 

ES40 $1,295.00 

ES45 $3,195.00 

ES47 $4,195.00 

Proliant Servers / HP Blades 

AJ 742A $4,175.00 

AJ 753A $5,175.00 

Disks 

AJ 736A $535.00 

AJ 737A $825.00 

AJ 738A $385.00 

AJ 740A $675.00 

Memory 

413015-821 $1,290.00 

39741 3-B21 $375.00 



HBA Fibre Channel 

AE311A $815.00 

A8003A $765.00 

LPE12000 $840.00 

Printers 

LA600/LN05/LN07/LA400/LN01/02/LN40 
Printer Repair 25% Off 




Don't throw out your 
PC flat panels when you 
think they're dead... 

SAVE MONEY and let Pegasus 
repair your PC flat panels! 

IBM, Dell, and most all other manufacturers 
14", 15", 17", 19" & 21" Flat Panels 
POS Flat Panels 

Whether it is a Backlight, Inverter, Transistor, Video 
Processor, Flash IC, etc., we can repair your flat screen with 
a 90-Day Warranty on all repairs. Pricing ranges from $60 to 
$95 depending upon the size and the problem. Pegasus has 
Free Ground Return Shipping and a No Fix/No Fee policy. 



Pegasus Computer Marketing, Inc. 

(800) 856-2111 
www.pegasuscomputer.net 



Pegasus Buys, Sells, and 
offers Depot Maintenance 
on Kronos 420G, 460F, 
480F, 551,4500, Remote 
Readers, Proxy Readers, 
Mag Stripe Readers, Bell 
Relays, Battery Backups, 
Ethernet Boards, Modems 

Whatever you need we can 
help you with your time clock 
requirements. 

Special Summer Pricing 
during July & August. 

Just mention you saw 
our ad in Processor 



dbg 



DEC-Compaq-Cisco-Sun-SGI 



AlphaServer GS160 Model 16 

Base System for OpenVMS 

• DY-160CG-AA 

• One Alpha 21264 Processor 1224 MHz 

• Four Quad Building Blocks 

• One14-Slot PCI Shelf 

• OpenVMS Operating System License 



ALSO AVAILABLE: 

• Additional 1224 IVIHz CPU w/SIVIP 

• Additional Memory 

• Additional PCI Shelves 

• Additional PCI Options 



2 Systems In Stock! 



Authorized COMPAQ" Reseller 

WE WILL BUY YOUR USED HARDWARE! 




770-982-9827 

Fax 770-982-9091 

www.dbgweb.com | salesp@<lbg;web.com 
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formation Support Concepts 

(800) 458-6255 
www.iscdfw.com 

• Information Support Concepts sells 
rackmount products, cabinets, floor- 
ing, tech benches, UPSes, PDUs, 
and related furniture and accessories 
for IT, network, and telecom use. 

• The company sells both custom- 
made and off-the-shelf solutions. 

• "While we don't make our products, 
we look for vendors flexible enough 
to adapt to the market that we're 
working with [and with the] quality 
that we're looking for," says Kevin 
Hunt, vice president of sales and 
marketing at Information Support 
Concepts. 



by Robyn Weisman 

One of the most important, and arguably 
most overlooked, aspects of a data center is 
the furniture and other accessories designed 
to house and protect hardware. "The ability 



environment is strictly controlled, open 
racks will obviously be less restrictive on 
necessary airflow." 

Information Support Concepts offers just 
about any style of rack or enclosure that 
an SME might use, from server racks 



is, for the most part, a one-time purchase 
when the room is built and isn't closely tied 
to the vendor selection for racking and fur- 
niture," Stahl says. 

At the same time, fewer vendors means 
simplified vendor management issues, says 



™ Information Support Concepts,iNc 

Leading Information Technology Products Since 1987 



I 



to work error-free on devices installed in a 
rack solution with cable management and 
power management is crucial to the server 
environment," explains Darin Stahl, lead 
analyst with Info-Tech. "The solution [a 
data center chooses] must allow IT staff to 
work safely, to identify correct cabling and 
power connections, and to provide suffi- 
cient access to the rear and front of the 
devices." 

Mansfield, Texas, -based Information 
Support Concepts (www.iscdfw.com) sells 
rack mounts, computer chairs, and pretty 
much anything else a small to midsized 
enterprise needs to furnish and build out 
its data center. When the company first 
launched in 1987, most IT shops were still 
using IBM mainframes, and networking 
had yet to become a concept. "We were 
selling tape racks and [IBM] disk pack 
cabinets," says Kevin Hunt, vice president 
of sales and marketing at Information 
Support Concepts. "If you look at old sci- 
ence fiction movies, where you see com- 
puter areas with tapes going around like 
old recording tape, those are the kinds of 
racks we sold. The disk pack racks looked 
like big cake platters." 

Over the past 20-plus years. Information 
Support Concepts' business has evolved 
from supporting these old-school systems 
to today's networks. "There used to be 
well-defined niches between mainframes, 
telecom, and AV [audio-visual]," says 
Hunt. "Now these three areas are beginning 
to get very fuzzy as to the products they 
use, [which] has opened up a lot of markets 
for us." 

What Today's IT Needs 

Today's IT and data center managers 
typically traverse a couple of key decision 
points when choosing furniture and related 
accessories, says Stahl. First off, IT man- 
agers have to weigh the relative advan- 
tages and disadvantages between open 
racks and enclosed cabinets. "Enclosed 
cabinets bring additional security since 
they can be locked [and] reduce risk of 
accidental outages since all critical inter- 
faces [such as] cables and power are pro- 
tected," Stahl says. "However, enclosures 
can restrict airflow to sensitive equipment, 
and if the physical access to the server 



designed for deep, hot-running servers to 
computer racks for shallow hardware, 
portable server racks, and wall-mounted 
racks. "It helps, of course, that most hard- 
ware is standardized to fit in a 19-inch rack 
mount," Hunt says. 

Information Support Concepts prides 
itself on being a one-stop shop for fur- 
nishing the IT environment. Hunt says 
the company is getting ready to add 
another 100 or more new products, many 
of which underscore its increasing in- 
volvement in the telecom space. Addi- 
tionally, Information Support Concepts 
will soon be offering a greater selection 
of different Fibre boxes along with repair 
tools for technicians. 

Of course, server furniture and other 
accessories can be decoupled from a single 
vendor solution — and frequently are, says 
Info-Tech's Stahl. "For example, flooring 



Stahl. "Racking and furniture are provi- 
sioned not only at the initial build but 
throughout the life of the server environ- 
ment, so consistency with the solution is 
more important." 



"While we don't make our products, we 
look for vendors flexible enough to adapt to 
the market that we're working with [and 
with the] quality that we're looking for," 
says Hunt. "If we start getting returns or 
there are problems and a vendor [doesn't] 
fix it, then we're going to drop [the vendor] 
and source a manufacturer that will be there 
for the long term." 

Staying On Top Of Trends 

Keeping up with the IT space is no small 
feat. According to Hunt, Information 
Support Concepts does several things to 



Information Support Concepts sells 
rack mounts, computer chairs, 
and pretty much anything else a small to 
midsized enterprise needs to furnish 
and build out its data center. 



J 



Information Support Concepts provides 
its customers with custom-built products 
and ready-made ones chosen from both 
American and foreign manufacturers. 



A Sampling Of 

Information Support Concepts' Products 



I3Sliiil!S9i^HIHHii^HiS^ 


ConnectFloor Modular 
Computer Floor 


A modular flooring system that is 
eco-friendly and does not require 
jacks underneath. Connects togeth- 
er like LEGO bricks. Great for cable 
management. 


Varies by volume 


ERK Economy 
Rackmount Computer 
Cabinet For 19-inch 
Rackmount Hardware 


Seismic-certified rackmount cabinets 
that feature welded side panels with 
vents and configurable thermal man- 
agement knockouts. 


From $388.50 


RPM1601 19-inch 
Rackmount Remote 
Power Intelligent Power 
Manager 


Provides scalable access to as 
many as 128 devices using your 
network, Web browser, or telecom 
system. 


$399 


TTSWE Series Low 
Profile Server Rack 
Cabinets 


Stackable compact server cabinets 
in multiple configurations that fea- 
ture lift-off field-reversible doors with 
lock, fan holes in top and bottom 
panels, and four 2-inch cable entry 
knockouts in the front and rear. 


From $535.50 



secure its reputation as a nimble, customer- 
oriented company. Its salespeople make it 
their mission to understand why a customer 
uses a product. ISC's sales staff phones 
online customers to verify their orders and 
finds out how a given product will be used 
and what types of products they believe 
they are going to need. 

In addition, ISC staff reads trade papers 
and goes to trade shows to keep up with 
trends. And for its burgeoning telecom 
business, ISC recently hired a product man- 
ager from the telecom industry who is edu- 
cating the rest of the company on how to 
address this space. 

According to Hunt, one important trend 
in the IT industry is that networking and 
telecom are converging in several ways, 
particularly in cable management. As a 
result. Information Support Concepts is 
offering more solutions to tame the mess of 
fiber wiring and other cables used in the 
data center. 

Recently, ISC added modular computer 
flooring to its arsenal of products. Its 
Connect Floor Modular Computer Floor 
product raises the floor less than 3 inches, 
and unlike traditional flooring, it does not 
use any jacks under it. 

"It's made for cable management, not for 
forced air, and it's fantastic for the guys 
who have to go into older buildings or redo 
certain rooms," says Hunt. "They can lay 
this floor down on most any surface and 
run cables under it. And if they want to put 
in boxes for power, they've still got a lot of 
options to do so." 



July 31,2009 



Processor.com 



Page 43 





I hired employees to 
run my business. 

NOT to sell my old 
computer equipment. 



When it comes to IT equipment 
disposal we are serious. Let us 
worry about Data Destruction, 
EPA regulations, Transportation, 
Down time and Insurance. Why 
tie up your resources or take 
chances with your data 
or environmental issues? 
Call DMD today. 



We Purchase: 

Computers/Laptops 
Networking Equipment 
Power/Environmental 
Telecom/Network 
Complete Data Centers 
Printers 



We Offer: 

Asset Tracking/Reporting 

Deinstallation/Packing/Transport 

DOD Level Data/Mechanical Destruction 

EPA Recycling/Reuse 

Ongoing Support Plans 

Technology Refresh/Install Programs 



Find out why some of the top U.S. companies and Government 
Agencies call DMD Systems Recovery. 



n V e n t 




DIV1D Systems Recovery, Inc. 

A Slightly Different CompanyTM 
Phone: (602) 307-0180 Fax: (602) 307-0181 
Internet: www.dmdsystems.com 



BBB 



Providing QUALITY GOODS and SERVICES for Industry. Member of AFCOM, Better Business Bureau, Chamber of Commerce, HP Authorized, 



How Do You Measure the 
ergy Efficiency of Your Data Center? 



Sentry : Power Management Architecture 



WEB BASED SPM INTERFACE 










i 













Sentry Power Manager 

> Enterprise Cabinet Power Management 

> Reports S Trends 

> Device Monitoring 

> Groups a Clusters 

> Kilowatt Readings for Billing 

> Auto-Discovery of Sentry CDUs 

> Alarms 



WEB BASED CDU INTERFACE 



< l< 




Sentry : POPS Switched CDU 

With Device Monitoring 

> Rack Level Power Management 

> Outlet Power Monitoring (POPS) 

> Input Power Monitoring 

> Environmental Monitoring 

> Outlet Groups 

> Alarms 



> Sentry POPS 

Measure and monitor power information per 
outlet, device, application, or cabinet using Web 
based CDU Interface 




> Sentry Power Manager 
Secure software solution wliicli allows: 

> Monitor, manage & control multiple CDU's 

> Alarm management, reports & trending 
of power info 

> ODBC Compliant Database for integration into 
your Building Management or ottier systems 

> kW & l(W-ti IT power billing and monitoring 
information per outlet, device, application, 
cabinet or DC location 



With Sentry Power Manager (SPM) 

TM 

and Sentry POPS (Per Outlet Power Sensing)CDU's! 



J 




Server Technology 

tf 1.800.835.1515 www.servertech.com 

Solutions for tlie Data Center Equipment Cabinet tell .800.284.2000 sales@servertech.com 
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Physical Infrastructure 



ATEN 

Simply Better Connections' 

ATEN is the largest KVM manufacturer in the world and 
has been delivering KVM and remote connectivity solu- 
tions for more than two decades. With a range of products, 
ATEN meets the needs of key market niches in both 
SMEs and large enterprises. ATEN designs its own ASICs 
(application-specific integrated circuits) to provide unique 
features and ensure a high level of quality and reliability. 
ATEN meets the quality management standards of ISO 
9001 :2000. 



Products Sold: 

A line of KVMs, including CATS, KVM Over The Net, multi- 
platform, multiuser, USB, and LCD consoles. 



999-2836 | www.aten-usa.com 



Physical Infrastructure 



CYBER@SWITCHING 



® 



Cyber Switching began pioneering power distribution 
technologies in 1994. Our PDUs are used to power cycle 
and manage power to blade servers, routers, SANs, and 
other data center equipment. Our intelligent PDUs can 
monitor current individually by outlet and also provide virtual 
circuit breaker protection on an individual outlet basis. No 
other PDU on the market offers these unique features. 



Products Sold: 

• Intelligent power management 

• Value-added power management 

• Metered power distribution 

• Three-phase power distribution 



Energy management 
and control 
Switches 
Patch Panels 



(888)311-6277 I www.cyberswitching.com 



Physical Infrastructure 




IT Watchdogs 

IT Watchdogs got its start when founder Gerry Cullen devel- 
oped a product called Weather Goose in an apartment in 
Houston. Today, the company has seven different climate 
monitors and more than 70 different product numbers. At IT 
Watchdogs, we believe in providing customers with low-cost 
climate monitors that have the same or better features than 
competitors'. Plus, we offer fast, professional response to 
customers, with support handled by the same programmers 
and engineers that develop and maintain our products. 

Products Sold: 

A full line of environmental products, including climate 
monitors, sensors, and cameras 



(512)257-1462 I www.itwatchdogs.com 



Physical Infrastructure 



RACKMOUNT 

SOLUTIONS, Ltd 

where customer service matters^ 



Rackmount Solutions' mission is to listen to the IT engi- 
neer's specific needs and deliver superb-quality, high-per- 
formance products through continuous product innovation 
and operational excellence. We pride ourselves in provid- 
ing quality customer service, products that fit your IT 
requirements, and solid value for your money. 

Products Sold: 

• Wallmount and server racks and cabinets, including 
sound proof, air conditioned, and large cable bundle 

• Desktop/tabletop portable racks 

• Shockmount shipping cases 

• Bulk cable 



Physical Infrastructure 



s^avtech 



AVTECH Software, founded in 1 988, is focused on making 
the monitoring and management of systems, servers, net- 
works, and data center environments easier. AVTECH pro- 
vides powerful, easy-to-use software and hardware that 
saves organizations time and money while improving opera- 
tional efficiency and preparedness. AVTECH products use 
advanced alerting technologies to communicate critical status 
information and can perform automatic corrective actions. 

Products Sold: 

A full range of products that monitor the IT and facilities 
environment, including temperature, humidity, power, 
flood, room entry, and UPS 



(888)220-6700 I www.AVTECH.com 



Physical Infrastructure 



Powering Business Worldwide 

Eaton has many global brands that provide customer- 
driven PowerChain Management™ solutions to serve the 
power system needs of the industrial, institutional, govern- 
ment, utility, commercial, residential, IT, and mission- 
critical OEM markets worldwide. For more than 40 years, 
Eaton has worked closely with customers to meet their 
requirements for innovative, end-to-end power protection 
and management solutions. 

Products Sold: 

• UPSs 

• ePDUs, including Basic, Metered, Monitored, Advanced 
Monitored, Switched, and Automatic Transfer Switch 



(877)785-4994 I www.epdu.com 



Physical Infrastructure 



PDUs 



direct 



Established in 2008, PDUsDirect.com is an online whole- 
saler providing a select line of PDUs for server and net- 
worked environments. PDUs Direct's basic, metered, and 
switched Rack PDUs provide local and remote power 
management, power monitoring, and environmental moni- 
toring. We pride ourselves in offering industrial-grade qual- 
ity products at the lowest prices, with the fastest shipping 
(most orders shipped within 24 hours) and simplest pur- 
chase process. 

Products Sold: 

A complete line of 20A PDUs, including metered, basic, 
and switched. 



751-7387 I pdusdirect.com 



Physical Infrastructure 




Server Technolosy 

Solutions for the Data Center Equipment Cabinet 



Server Technology is committed to the PDU market with the 
largest group of engineers dedicated to power distribution 
and other solutions within the equipment cabinet. Advance- 
ments in device power monitoring help data centers monitor 
and improve their efficiency, and continuous research and 
development is fueled by companies that look to Server 
Technology for their custom cabinet power solutions. 

Products Sold: 

A complete line of cabinet PDUs, including Per Outlet 
Power Sensing (POPS), Rack Mount Fail-Safe Transfer 
Switch, Console Port access with remote power manage- 
ment. Switched, Smart, Metered, Basic, and -48 VDC 



Physical Infrastructure 



BayTech was founded in 1976 and, since the 1990s, has 
developed unique products for remote power management. 
The company uses printed circuit board instead of wires for a 
better, more resilient connection between the data center 
equipment and the receptacle. BayTech provides an exten- 
sive Web site with brochure downloads, warranty informa- 
tion, and reseller support and also offers evaluation units for 
data centers. 

Products Sold: 

• Power control, distribution, management, and metering 

• Power transfer switches 

• Console management and remote site management 



(800)523-2702 I www.baytech.net 



Physical Infrastructure 




At Hergo, we understand your technology requirements 
and the best way to incorporate that technology into your 
workspace. The Hergo product line combines a variety of 
interchangeable parts, most of which are standard compo- 
nents. All Hergo racks are made of heavy-duty steel and 
are powder coated, offering superior quality and durability, 
as well as better ultraviolet ray and corrosion resistance. 

Products Sold: 

• Cabinets and enclosures 

• Server racks 

• Computer carts 

• Cable and power management systems 



222-7270 I www.hergo.com I GSA Contract Number: GS-29F-0133G 



Physical Infrastructure 



Power Cabling 



Power Cabling is the world's leading independent manu- 
facturer of UL-listed power distribution cable assemblies. 
Power Cabling stands behind its products with the indus- 
try's most comprehensive guarantee, backing its manufac- 
tured products and assemblies to be free from defects in 
material and workmanship under normal use for life. No 
other manufacturer offers this guarantee. Every cable 
manufactured by Power Cabling meets the high standards 
of quality established by Underwriters Laboratories. 

Products Sold: 

Power cables in various standard and custom lengths and 
colors, often ready to ship the same day you order. 



(800) 658-0888 | www.powercabling.com 



Physical Infrastructure 




From the company's inception in 1996, Snake Tray's 
focus has been the development of superior products that 
help eliminate repetitive, labor-intensive installation steps. 
Snake Tray products are designed better than traditional 
cable management and power distribution products, 
allowing our products to deliver unsurpassed cost savings 
because they're easy to install. Added to this is our 
expertise in datacom and data center cabling, which aids 
our customers during project planning. 



Products Sold: 

• Cable management 

• Power distribution 



• Distribution boxes 

• Airflow solutions 



(866)207-6631 I www.rackmountsolutions.net 



(800)835-1515 I www.servertech.com 



(800)308-6788 I www.snaketray.com 
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TEMPERATURE@LERT' 

USB TEMPERATURE MONITOR WITH EMAIL ALERTS 



Boston, Mass., -based Temperature @lert manufactures 
products designed to be as simple as possible to provide 
the most reliable temperature monitoring for your IT equip- 
ment. Temperature® lert has been growing at a steady, 
measured pace, which allows it to exceed customer expecta- 
tions in terms of product quality and support, and its cus- 
tomer support staff is composed only of members of its prod- 
uct engineering team, ensuring superior support. 

Products Sold: 

USB and Wi-Fi versions of the Temperature @lert device, 
which monitors data center temperature, alerts you to 
problems, and takes corrective action as needed. 



(866)524-3540 I www.24sensor.coin 



Networking & VPN 



BLADE 

NETWORK TECHNOLOGIES 



Founded in 2006, BLADE Network Technologies is the fifth- 
largest provider of 1 Gigabit fixed, managed Ethernet 
switches and the third-largest provider of 10 Gigabit fixed, 
managed Ethernet switches for high-performance, cloud 
computing, and virtualized dynamic data center environ- 
ments. The company is headquartered in Santa Clara, 
Calif., and offers sales and support in North America, Asia- 
Pacific, Japan, China, Korea, Europe, and the Middle East. 

Products Sold: 

• Embedded switches for blade servers 

• Top-of-Rack BLADE RackSwitch family 

• Network virtualization and management 



(408)850-8999 I www.bladenetwork.net/pad1 



Security 



npaloalto 
■ NETWORKS 

Using advanced application-classification technologies as 
a core foundation, Palo Alto Networks' mission is to rebuild 
the network firewall from the ground up to provide compa- 
nies unequaled visibility and control over the applications 
and related data coming into and out of company 
networks. Without negatively impacting performance, 
Sunnyvale, Calif., -based Palo Alto Networks' firewalls can 
identify and categorize over 850 applications and enforce 
access policies on a per-user or per-group basis. 

Products Sold: 

The PA-2000 and PA-4000 firewall product lines, with 
throughput support ranging from 250Mbps to lOGbps. 



(408)738-7700 | www.paloaltonetworks.com 



't^Diskeeper 

corporation ■ 



Diskeeper is the undisputed innovator of technologies that 
enhance the performance and reliability of Windows com- 
puters. ClOs and IT managers rely on Diskeeper software 
to provide unparalleled performance and reliability to their 
business laptops, desktops, and servers. Founded in July 
1981 , Diskeeper is a multinational corporation with head- 
quarters in Burbank, Calif., and corporate offices in 
England and Hong Kong. The Diskeeper product line is 
distributed globally. 

Products Sold: 

A line of computer and storage performance-enhancing, 
data protection, and data recovery products. 



(818)771-1600 I www.diskeeper.com 
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designed and 
manufactured by 

upsite 



technologies* 

Founded in 2001 , Upsite Technologies has established itself 
as a leader in the marketplace for high-availability data cen- 
ter solutions, concentrating on hot spots and energy-efficien- 
cy issues. Upsite founder Kenneth G. Brill recognized a need 
for products and solutions reaching far beyond standard 
engineering and consulting offerings. Upsite has developed 
a suite of products designed to increase the reliability and 
availability of data centers while reducing energy costs. 

Products Sold: 

A line of products designed to solve heat-density problems 
in data centers, including blanking panels, temperature 
strips, and raised floor grommets to seal cable openings. 



(505)982-7800 I www.upsite.com 



Networking & VPN 



riverbed 



Think fast." 

Riverbed Technology delivers WAN optimization tools to 
help solve problems that prevent enterprises from sharing 
application and data across wide areas. Riverbed's solu- 
tions increase the performance and value of mission-criti- 
cal applications, including file sharing, email, backup, doc- 
ument management systems, ERP, CRM, and IT tools. 
Thousands of enterprises use Riverbed to make their IT 
infrastructure faster, less expensive, and more responsive. 

Products Sold: 

A line of WAN optimization tools, including application 
acceleration, IT consolidation and virtualization, backup, 
and bandwidth optimization. 



(877)483-7233 | www.riverbed.com 



aclaphed 



Adaptec provides I/O solutions that protect, accelerate, opti- 
mize, and condition data. Adaptec products are used in IT 
environments ranging from on-demand cloud computing to 
traditional enterprise data centers. The company's products 
enable data center managers, channel partners, and OEMs 
to deploy storage solutions to meet their customers' evolving 
IT requirements. More information is available at www 
.adaptec.com, on its blog at storageadvisors.adaptec.com, 
and at adaptec.com/facebook and twitter.com/Adaptec_lnc. 

Products Sold: 

Data storage I/O products, including ASICs, HBAs, SATA/ 
SAS and SCSI RAID controllers, and software for IP SANs 



(408) 945-8600 | www.adaptec.com 



dtSearcK 

www.dtsearch.com 



Maryland-based dtSearch started research and develop- 
ment in text retrieval in 1988. The company is known for 
speedy adoption of new programming standards, OSes, 
and file types. Plus, it has a flexible licensing model. 
Typical corporate use of dtSearch includes general infor- 
mation retrieval, Internet and intranet site searching, and 
email archiving and email filtering. 

Products Sold: 

Text retrieval products, including: 

• Desktop With Spider • Web With Spider 

• Network With Spider • Engine For Win & .NET 

• Publish For CD/DVDs • Engine For Linux 



(800)483-4637 I www.dtsearch.com 



Networking & VPN 




NETWORKS 



Companies rely on Barracuda products because they're 
easy to deploy and use, don't require IT expertise, and 
come with automatic updates. Barracuda does not charge 
per-user, per-port, or per-server licensing fees, making its 
products among the most affordable. As a customer, you'll 
be backed by Barracuda Central, an advanced 24/7 security 
operations center that works to monitor and block threats. 



Products Sold: 

• Spam and spyware 
protection 

• Email archiving 

• Data backup and 
disaster recovery 



Content filtering and 
application blocking 
Firewalls and SSL VPN 
Link and load balancing 



268-4772 I www.barracuda.com 



Security 



FinallySecure 



In 2005, the leading SAP security provider SECUDE 
formed its Data Protection division, called FinallySecure. 
The Switzerland-based operation does business in the 
United States, Europe, the Middle East, and Asia and 
helps clients all over the world meet and defeat security 
threats. FinallySecure's goal is to deliver IT products that 
are future-proof, easy to migrate, and focused on ROI. 

Products Sold: 

Endpoint data protection, email security, file and data 
security, enterprise single sign-on security, smart card- 
and token-based authentication, and SAP security 



(706)216-8609 | finallysecure.com 




PRODUCTS 



Established in 1983, CMS Products is a leading innovator 
in data backup, encryption, and security technology. CMS 
Products has received global recognition for its work in 
developing leading-edge, easy-to-use products that 
revolutionize the notebook and desktop data backup/ 
restore and storage industry. 

Products Sold: 

• Backup and restore disaster recovery software and sys- 
tems, including laptop, desktop, and secure versions 

• Laptop hard drive upgrades 

• Data security products, including encryption software, 
encrypted portable backup, and encrypted flash drives 



(800)327-5773 | www.cmsproducts.com 



SYSTEMS CORPORATION 

Since 1 987, Compurex Systems has sought to be a one- 
stop source of technology, including systems and storage, 
network applications and peripherals, and service and repair. 
Compurex Systems prides itself on offering competitive pric- 
ing, rapid delivery, quality product, and attention to detail and 
customer service. At Compurex Systems, we look to make 
long-lasting relationships with our customers and suppliers. 
Our customers return because they know they can trust us. 

Products Sold: 

A complete line of new and certified refurbished servers, 
networking, storage, and telecommunications hardware 
and services from DEC, Compaq, and HP. 



(800)426-5499 I www.compurex.com 
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Data Media Source 

The Data Media Source is your best source for discounts 
and deals on all formats of data media products. We have 
a huge inventory of brands, categories, and capacities at 
prices below wholesale. We buy up excess inventories, 
closeouts, and returns and offer our resellers pricing below 
the direct manufacturers on most items. Our 20+ years in 
the business of selling only data media gives us the expe- 
rience and resources to make every order you place with 
us more profitable for you. 

Products Sold: 

A complete line of data media, including DLT, SuperDLT, 
LTO, AIT, and QIC 



(800)252-9268 I www.datamediasource.com 




DMD Systems Recovery 

DMD Systems Recovery offers new and refurbished comput- 
er equipment and services. We provide exceptional value 
and quality because of our experience in procuring high- 
quality equipment. DMD also provides cost-effective and 
environmentally safe computer and communications equip- 
ment disposal services. Our dedicated staff can handle all 
aspects of equipment disposal, from logistics to reporting. 

Products & Services: 

Equipment disposal services, along with a complete line 
of used and refurbished equipment, including computers, 
networking, laptops, monitors, point of sale, servers, stor- 
age, and telecommunications. 



(877)777-0651 I www.dmdsystems.com 




IGS is an independent manufacturer and source of supply, 
service, and depot repair of obsolete Digital Equipment 
Corp. parts, products, and systems. We maintain an exten- 
sive inventory of DEC parts and equipment; some date from 
the 1960s. We refurbish and service these parts, adding 
current technology when applicable. We provide Advance 
Replacement Service within 24 hours if we have the item in 
stock and, with 75,000 stock items, chances are we will. 

Products Sold: 

Digital Equipment Corp. parts, products, and systems, 
including memory, storage, processors, display and video, 
printers, and cables, for repair, lease, or rental 



332-7278 I www.decparts.com 




Information 
Technology 
Trading 



At Information Technology Trading, our goal is to help you 
acquire the right hardware or software solution. We special- 
ize in purchasing and reselling data-processing equipment 
and have more than 21 years combined experience. We pro- 
vide services and system upgrades, DASD, communication, 
and memory. We're also an outlet for off-lease portfolios. 

Products Sold: 

• AS400, Advanced System/36, R/S6000, ES/9000, and 
PC systems (including lease and rental) 

• CPUs, memory, disks, tapes, displays, and controllers 

• Services, including system design and installation, 
maintenance, and buyback of existing hardware 




• PaceButler buys used cell phones. 

• In business since 1987 

• Redeploy your used phones after upgrade 

• Donation option - directly to the non-profit of your choice 

• Dedicated to customer satisfaction 

- A+ Rating with the Better Business Bureau 

- Payment issued in four days 

• Dedicated to employee development 

- Book reading program 

- Health and fitness programs 

Products Sold: 

We buy used cell phones & PDAs, including Apple, LG, 
Blackberry, HTC, Motorola, Nextel, Nokia, PalmOne & 
Samsung. 




In 1987, Pegasus Computer Marketing started providing 
mainframe products to the end-user market. What began as 
a sales-only organization soon adapted to offer in-house 
repair and refurbishment. During the past 10 years, Pegasus 
has focused primarily on the point-of-sale and barcode 
industries, buying, selling, and providing service contracts for 
anywhere from a few scanners to hundreds. 

Products Sold: 

We buy, sell, and service: 

• Point-Of-Sale Equipment and POS/PC Flat Panels 

• Wired and Wireless Barcode Hardware 

• Kronos Time Clocks and Accessories 



(405)715-3686 1 www.itechtrading.com 


■ 


(800)248-5360 1 www.pacebutler.com 


■ 


(800) 856-2111 1 www.pegasuscomputer.net 
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ENCLOSURES & RACKS 



Hergo is a U.S. designer 
and manufacturer of 
Teclinical Workspace 
Solutions. 





Visit our Website at 
www.liergo.com to learn 
more about our products. 




An original equipment manufacturer 
since its inception in 1992, Hergo remains THE trusted 
source for technica furniture. 
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nergo^ 888.222.7270 www.hergo.com 




GSA Contract # - GS-29F-01 33G 

56-01 55th Avenue, IVIaspeth, New Yorl< 11378 





Powering Business Worldwide 



Eaton ePDU makes selecting Enclosure 
Power Distribution Units easy 

Uninterruptibiflty from Eaton® isn't a new offering. 
It's an iron-clad promise, backed by a $13B global 
organization and a century-long heritage with power 
protection, distribution and management expertise. 

Eaton's expanded ePDU® portfolio of power distribution 
units offers the broadest range on the market. Making 
the right decisions from the start can make a difference 
in the dependability and efficiency of your infrastructure. 

Eaton and ePOU are irademarks of Eaton Corporation, ©20DS Eaton Corporation. All rights reserved. 



Use our new product configuration wizard to search 
over 1,000 products for the perfect solution. Tailor your 
ePDU to include a wide range of voltages using various 
combinations of NEMA and lEC outlets and plugs. 

Visit the product wizard to meet your power distribution 
challenges and power through. 

www.epdu.com/prsnws 

(877) 785-4994 
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Automatic Transfer Switch— ATS 



** ' e-..Sf!l^e ^ 




Standard Features 

Out-Of-Phase Source Switching 
8-1 5ms Switching Time 
Programmable Dropout Voltage 
Programmable Switchback Voltage 
SNMPAnd HTTP With DS-Series 
PCB-Based Reliability 
Reports Volts, Current, Watts, VA 
Break-Before-Make Transfer 



Provide Redundancy To Single-Corded Devices With The 
Ability To Switch Out-Of-Phase Sources In 8 To 15ms- 



Providing redundancy on the power-circuit level is critical to 
maintaining uptime. The ATS Series provides a simple and reliable 
solution for automatically sensing power loss and seamlessly 
switching to a backup circuit. BayTech ATS transfer switch line 
offers a unique approach to performing the transfer by completely 
severing the connection between the source and load then waiting 
for the zerocrossing to perform the transfer. This is the driving 
force behind being able to perform out-of-phase transfers with 



a low-cost solution. Monitoring Power on the ATS is a unique fea- 
ture which provides information about: 



Amperage Load 
Voltage 



(Watts) True RMS Power 
Internal Temperature 



Volt-amps 



By combining the ATS and the DS-Series, console server alerts on 
power and transfers can be sent via secure SNMP V3. 



DS-RPC Remote Site IVIanagement Series 





BayTech's DS-RPC Remote Management Series provides secure and 
reliable management for your network, servers, and console ports. 
The DS-RPC combines the powerful combination of power manage- 
ment and console access. The cost-effective DS-RPC Series is 
meant for single connection applications. Security features such as 



Device Management 

Console Port Management 
Remote Power Control 
True RMS Voltage/Current 
SNMP Support 
HTTP Power Control 
SSHv2/SSL Secure Access 
RADIUS Authentication 
Direct TCP Port Access 
Telnet/SSH Menu Device Selection 
Device Port Naming 
Individual Port Password Assignment 



SSH v2, RADIUS authentication, SNMP, and user access lists per 
port allow system administrators to remotely manage the DS Series 
with greater confidence and control. The selected host module pro- 
vides either secure in-band or dial-up out-of-band access to your 
DS-RPC Series remote management solution. 



Bay Technical Assoc. Inc. 5239 A Avenue Long Beach, MS 39560 Tel: 228-563-7334 Fax: 228-563-7335 sales@baytech.net 



